commitizen / commitizen/cz-cli

Minimist dependent package vulnerability due to older version usage

Open
#945 7 comments 21 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
17.5k
Forks
566
Avg merge
8h 16m
Merged PRs (30d)
1

Description

Hi,

We are using commitizen package in our microservice api. As we know commitizen has a dependency on minimist package and it shows us a vulnerablility during our docker image scan.
Screenshot 2022-06-17 at 12 41 22 PM

Could you guys please update your package to a newer version or may be upgrade the minimist package to it's fixed version which is **1.2.6**?

Hope to see the resolution soon on this issue. Thanks !

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.