fin-hypergrid / fin-hypergrid/core
moustache vulnerability
Open
- Dominant language
- JavaScript
- Stars
- 907
- Forks
- 139
- PR merge metrics
- No merged PRs in 30d
Description
GitHub informed us that mustache@2.2.0 has a security vulnerability.
We will update to moustache@2.3.0 on our next release.
I have already made the edit to package.json in my 3.0.0 branch (was "2.2.0"; now "^2.3.0"). There is little point in pushing this change separately without also releasing new build files to npm and the CDN.
@dcchuck and @Dwaynekj If you guys feel it is urgent, we could do an interim release before 3.0.0.
Contributor guide
Assessment
This issue has not been assessed yet.