Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security] - Bump prismjs from 1.25.0 -> 1.29.0 #434

Open
matthew-heath opened this issue Mar 21, 2024 · 0 comments
Open

[Security] - Bump prismjs from 1.25.0 -> 1.29.0 #434

matthew-heath opened this issue Mar 21, 2024 · 0 comments

Comments

@matthew-heath
Copy link

matthew-heath commented Mar 21, 2024 •
edited
Loading

As part of dependabot vulnerability alerts set up on a private repository, the following alert shows for prismjs:

Screenshot 2024-03-21 at 11 22 05

The following PR fixed the above issue and it is suggested to upgrade to >=1.27.0 to avail of this.

Related CVE - https://www.cvedetails.com/cve/CVE-2022-23647/?q=CVE-2022-23647
@matthew-heath matthew-heath changed the title [Security] - Bump prismjs from 1.25.0 -> 1.29.0 [Security] - Bump prismjs from 1.25.0 -> 1.29.0 to clear alerts. Mar 21, 2024
@matthew-heath matthew-heath changed the title [Security] - Bump prismjs from 1.25.0 -> 1.29.0 to clear alerts. [Security] - Bump prismjs from 1.25.0 -> 1.29.0 Mar 21, 2024
@matthew-heath matthew-heath mentioned this issue Mar 21, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@matthew-heath