Wikiki/bulma-calendar

date-and-time library security vulernability

buildscientist opened this issue · 3 comments

buildscientist commented

Running v5.0.3 of Bulma-Calendar but this issue is still relevant to the latest release version and code base in master.

This library is using v0.6.3 of the date-and-time library which has a security vulnerability. See npm advisory 1592 for more details.

buildscientist commented

FYI - for someone who is looking to resolve this issue you can use npm-force-resolutions to force bulma-calendar to use v0.14.2 or above of the date-and-time library.

michael-hack commented

Updated Library on 0.14.2

  • 👍1