webpack / watchpack

Wrapper library for directory and file watching.
MIT License
377 stars 105 forks source link

fix: resolve vulnerabilities in watchpack dependencies #245

Closed riyadbabouri closed 3 weeks ago

riyadbabouri commented 3 weeks ago

In this pull request, I updated mocha to the latest version using npm install mocha@latest. This resolves several vulnerabilities related to outdated dependencies used by Mocha, including:

minimatch: ReDoS vulnerability (GHSA-f8q6-p94x-37v3) minimist: Prototype Pollution vulnerability (GHSA-vh95-rmgr-6w4m, GHSA-xvch-5gv4-984h) mkdirp: Dependencies that rely on vulnerable versions of minimist and minimatch. By updating to the latest version of Mocha, these vulnerabilities are mitigated, improving the overall security of the project.

linux-foundation-easycla[bot] commented 3 weeks ago

CLA Missing ID CLA Not Signed