bump loader-utils@^2.0.4 by kjakub · Pull Request #2015 · vuejs/vue-loader · GitHub | Latest TMZ Celebrity News & Gossip | Watch TMZ Live
Skip to content

bump loader-utils@^2.0.4 #2015

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

bump loader-utils@^2.0.4 #2015

wants to merge 2 commits into from

Conversation

kjakub
Copy link

@kjakub kjakub commented Nov 17, 2022

high │ loader-utils is vulnerable to Regular Expression Denial of │
│ │ Service (ReDoS) via url variable │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ loader-utils │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=2.0.4 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ vue-loader │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ vue-loader > loader-utils │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1084992

@kjakub
Copy link
Author

kjakub commented Nov 25, 2022

@sodatea

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dominikjaross97 dominikjaross97 dominikjaross97 approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@kjakub @dominikjaross97

TMZ Celebrity News – Breaking Stories, Videos & Gossip

Looking for the latest TMZ celebrity news? You've come to the right place. From shocking Hollywood scandals to exclusive videos, TMZ delivers it all in real time.

Whether it’s a red carpet slip-up, a viral paparazzi moment, or a legal drama involving your favorite stars, TMZ news is always first to break the story. Stay in the loop with daily updates, insider tips, and jaw-dropping photos.

🎥 Watch TMZ Live

TMZ Live brings you daily celebrity news and interviews straight from the TMZ newsroom. Don’t miss a beat—watch now and see what’s trending in Hollywood.