You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
@material-design-icons/scripts - vulnerability in peer dep from is-svg #30
I'm using @material-design-icons/scripts and i saw this vulnerability coming from faster-xml-parser peer dep of is-svg
fast-xml-parser <4.1.2
Severity: moderate
fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name - https://github.com/advisories/GHSA-x3cc-x39p-42qx
fix available via `npm audit fix --force`
Will install @material-design-icons/scripts@0.2.2, which is a breaking change
node_modules/fast-xml-parser
is-svg 4.3.0 - 4.3.2
Depends on vulnerable versions of fast-xml-parser
node_modules/is-svg
@material-design-icons/scripts >=0.2.3
Depends on vulnerable versions of is-svg
node_modules/@material-design-icons/scripts
is-svg fix is available i think in 4.4.0. ( A 5.0.x available too but don't know impact on the project)
Activity