ember-cli / ember-cli/ember-cli
Security vulnerability with `braces` package
Open
- Dominant language
- JavaScript
- Stars
- 3.2k
- Forks
- 1.2k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 8
Description
We're running into security vulnerabilities from <`v3.0.3` versions of the `braces` package. Checking out our dependency chain, it looks like it should be fixed if
- `broccoli` updates `sane` (there already exists a [PR](https://github.com/broccolijs/broccoli/pull/506) to do so) and then `ember-cli` pulls in the update.
- `ember-cli-dependency-checker` updates `find-yarn-workspace-root` to `v2.0.0`.
Contributor guide
Assessment
This issue has not been assessed yet.