CesiumGS / CesiumGS/cesium-native
Fix vulnerabilities reported in `tools` Node.js scripts to resolve vulnerability scanner warnings
Open
quality
- Dominant language
- C++
- Stars
- 623
- Forks
- 277
- PR merge metrics
- No merged PRs in 30d
Description
See https://nvd.nist.gov/vuln/detail/CVE-2025-7783
The fix is to upgrade the dependency (picked by the scanner from tools/generate-classes/package-lock.json) to 2.5.4, 3.0.4, or 4.0.4.
I would but I have no idea how this works, hopefully it is no big deal on your end ;^^
Thanks,
Contributor guide
Research direction
Start with tools/generate-classes/package-lock.json and compare its dependencies with CVE-2025-7783. Identify the dependency selected by the scanner, update it to 2.5.4, 3.0.4, or 4.0.4 as appropriate, then rerun the vulnerability scanner to confirm the warning is resolved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- node.js
- Domain
- security, tooling
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100