Update to ember-cli-babel@8+ to fix a json5 vulnerability
Z-Zhao opened this issue · 3 comments
Z-Zhao commented
Latest version has dependency on json5@0.5.1 which is high Severity reported by "npm audit"
json5 <1.0.2
Severity: high
Prototype Pollution in JSON5 via Parse Method - GHSA-9c47-m6qq-7p4h
Below is the result of "npm list json5"
├─┬ @ember/test-helpers@3.3.0
│ └─┬ ember-cli-babel@7.26.11
│ └─┬ babel-plugin-module-resolver@3.2.0
│ └─┬ find-babel-config@1.2.0
│ └── json5@0.5.1
you should update to ember-cli-babel@^8.0.0 which includes the below change
https://github.com/emberjs/ember-cli-babel/pull/492
Z-Zhao commented
ember-test-helpers/addon/package.json
Line 55 in 9cec68d
NullVoxPopuli commented
want to submit a PR?
NullVoxPopuli commented