documentationjs / documentationjs/documentation
vue-template-compiler XSS vulnerability
Open
- Dominant language
- JavaScript
- Stars
- 5.8k
- Forks
- 481
- PR merge metrics
- No merged PRs in 30d
Description
Hey @thomashohn, I ran npm audit fix as you said and saw that vue-template-compiler has a moderate XSS vulnerability which is used by documentation.
npm audit fix --force could fix it by upgrading documentation to 6.2.0, but that’s a breaking change, so not sure if it’s safe to do automatically.
Just wanted to bring it up so it can be checked.
Contributor guide
Assessment
This issue has not been assessed yet.