search

vite-plugin / vite-plugin-commonjs

A pure JavaScript implementation for CommonJs
MIT License
110 stars 17 forks source link

Update micromatch dep update >= 4.08 #58

Open RamK777-stack opened 2 months ago

RamK777-stack commented 2 months ago

Moderate | Regular Expression Denial of Service (ReDoS) in micromatch
Package: micromatch Patched in: >=4.0.8 Dependency of: vite-plugin-commonjs Path: vite-plugin-commonjs > fast-glob > micromatch More info: https://www.npmjs.com/advisories/1098681

When running yarn audit.

yejimeiming commented 1 month ago

Thanks for your feedbakc. It seems that fast-glob@3.3.2 is still using micromatch@^4.0.4. I will update the deps as soon as fast-glob is updated.