bholloway/resolve-url-loader

loader Utils Dependabot alerts in github for version below 3.2.1

Opened this issue · 1 comments

anjaneyuludesu commented
loader Utils Dependabot alerts in github for version below 3.2.1
dppanteon commented

loader-utils stable version is 3.2.1 which has dependency on JSON5 2.2.1 which resolves the Published Vulnerabilities GHSA-9c47-m6qq-7p4h (OSSINDEX) .
This vulnerability was because of JSON5 2.1.2.

Request resolution for the same is to upgrade loader-utils to 3.2.1

  • 👍2