hjeti/vue-generator

Critical vulnerability in vue-generator

warrebuysse opened this issue · 0 comments

warrebuysse commented

When running npm audit, vue-generator shows up to have 1 critical vulnerability for command injection. Could you please update the dependencies so the vulnerability is fixed?

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Critical │ Command Injection │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ open │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ No patch available │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ vue-generator │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ vue-generator > open │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://nodesecurity.io/advisories/663 │