GrapesJS / GrapesJS/cli

Usage lodash.template dependency version 4.5.0 in grapesjs-cli is having transitive dependency security issue

Open
#308 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
106
Forks
32
PR merge metrics
No merged PRs in 30d

Description

We noticed that usage of lodash.template dependency in grapesjs-cli is causing a high security transitive dependency issue.

The following updates should be made:

Usage of lodash versiopn 4.17.21 has fix for the the issue rather than using loash.template

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.