cube-js / cube-js/cube

CVE-2019-10744 in dependency

Open
#9,655 2 comments 1 reaction 0 assignees View on GitHub
dependencies
Dominant language
Rust
Stars
20.8k
Forks
2.1k
Avg merge
1d 2h
Merged PRs (30d)
181

Description

Hello,

your package `hive-driver` is using `jshs2` which is very old and uses version of `lodash` targeted in critical CVE-2019-10744

thank you for your product :)
regards

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.