decaporg / decaporg/decap-cms

6 high severity vulnerabilities when running npm install netlify-cms-app

Open
#6,513 12 comments 14 reactions 0 assignees View on GitHub
pinned
Dominant language
JavaScript
Stars
19.4k
Forks
3.1k
Avg merge
1d 14h
Merged PRs (30d)
9

Description

```
trim <0.0.3
Severity: high
Regular Expression Denial of Service in trim - https://github.com/advisories/GHSA-w5p7-h5w8-2hfq
No fix available
node_modules/trim
mdast-util-to-hast <=6.0.2
Depends on vulnerable versions of trim
node_modules/netlify-cms-widget-markdown/node_modules/mdast-util-to-hast
remark-rehype <=5.0.0
Depends on vulnerable versions of mdast-util-to-hast
node_modules/netlify-cms-widget-markdown/node_modules/remark-rehype
remark-parse <=8.0.3
Depends on vulnerable versions of trim
node_modules/netlify-cms-widget-markdown/node_modules/remark-parse
netlify-cms-widget-markdown *
Depends on vulnerable versions of remark-parse
node_modules/netlify-cms-widget-markdown
netlify-cms-app *
Depends on vulnerable versions of netlify-cms-widget-markdown
node_modules/netlify-cms-app
```

Are there any plans to upgrade these packages? Also reported here: https://snyk.io/test/npm/netlify-cms

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.