commitizen / commitizen/cz-cli

Minimist dependent package vulnerability due to older version usage

Abierto
#945 7 comentarios 21 reacciones 0 asignados Ver en GitHub
Lenguaje dominante
JavaScript
Estrellas
17.5k
Forks
566
Merge medio
8 h 16 min
PR fusionados (30 d)
1

Descripción

Hi,

We are using commitizen package in our microservice api. As we know commitizen has a dependency on minimist package and it shows us a vulnerablility during our docker image scan.
Screenshot 2022-06-17 at 12 41 22 PM

Could you guys please update your package to a newer version or may be upgrade the minimist package to it's fixed version which is **1.2.6**?

Hope to see the resolution soon on this issue. Thanks !

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.