Skip to content

Conversation

@derekaug
Copy link

Updates moment to version 2.29.2 to resolve this vulnerability.

@derekaug
Copy link
Author

any tips on getting circleci to be able to pull from my fork?

@amarjandu
Copy link

@ZJONSSON Any way I can support in getting this merged in? We are using unzipper and this appears to be a transitive dependency.

@ZJONSSON
Copy link
Owner

I don't see moment being used, can we just remove?

@derekaug
Copy link
Author

I don't see moment being used, can we just remove?

ooh, didn't even check that. went ahead and removed moment in the PR.

@derekaug derekaug closed this May 28, 2024
@derekaug derekaug reopened this May 28, 2024
@derekaug derekaug changed the title fix: updating version of moment to resolve path traversal vulnerability in moment dependency fix: removing moment to resolve path traversal vulnerability in moment dependency May 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants