Istanbul: Depends on handlebars v4.0.1 which has a severe security vulnerability
Please see https://www.npmjs.com/advisories/1164
IanKemp
All 3 comments
Also see: https://app.snyk.io/vuln/npm:istanbul
@gotwarlost , any ETA on this?
Cazaimi
on 10 Oct 2019
BTW, I'm fully aware that this package is deprecated, but a lot of projects still depend on it, hence why I think a release just to update the dependencies would be justified.
IanKemp
on 10 Oct 2019
👍4
+1
mailmrmanoj
on 7 Jan 2020
Was this page helpful?
0 / 5 - 0 ratings
Related issues
attodorov
路
33Comments
gbahamondezc
路
24Comments
amoufaddel
路
28Comments
ottes
路
36Comments
NiGhTTraX
路
36Comments
Most helpful comment
BTW, I'm fully aware that this package is deprecated, but a lot of projects still depend on it, hence why I think a release just to update the dependencies would be justified.