stylelint-config-airbnb package's dep includes high priority vulnerability
- Dominant language
- No language data
- Stars
- 7k
- Forks
- 1.4k
- PR merge metrics
- No merged PRs in 30d
Description
Could you please update **stylelint-config-airbnb** package's dependencies, as these include high priority vulnerabilities?
```bash
npm audit
High Prototype Pollution
Package lodash
Patched in >=4.17.11
Dependency of stylelint-config-airbnb [dev]
Path stylelint-config-airbnb > editorconfig-tools > lodash
More info https://npmjs.com/advisories/782
High Prototype Pollution
Package lodash
Patched in >=4.17.12
Dependency of stylelint-config-airbnb [dev]
Path stylelint-config-airbnb > editorconfig-tools > lodash
More info https://npmjs.com/advisories/1065
Moderate Regular Expression Denial of Service
Package underscore.string
Patched in >=3.3.5
Dependency of stylelint-config-airbnb [dev]
Path stylelint-config-airbnb > editorconfig-tools > argparse >
underscore.string
More info https://npmjs.com/advisories/745
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with npm audit and trace the dependency paths listed in the issue: stylelint-config-airbnb, editorconfig-tools, lodash, argparse, and underscore.string. Update the affected dependencies, then rerun the audit; done means the reported lodash and underscore.string vulnerabilities are resolved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security, tooling
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100