CedarCopilot / CedarCopilot/cedar-OS

bug: vulnerabilities in dependency package diff

Open
#184 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
172
Forks
19
PR merge metrics
No merged PRs in 30d

Description

`npm audit` reports that `cedar-os` is depends on vulnerable versions of **diff**:

```
diff 6.0.0 - 8.0.2
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch - https://github.com/advisories/GHSA-73rr-hh4g-fpgx
fix available via `npm audit fix --force`
Will install cedar-os@0.1.18, which is a breaking change
node_modules/cedar-os/node_modules/diff
cedar-os >=0.1.19
Depends on vulnerable versions of diff
node_modules/cedar-os
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.