karma-runner / karma-runner/karma-coverage
Vulnerability in transitive deps istanbul-lib-instrument@5.2.1/semver@6.3.0
Open
- Dominant language
- JavaScript
- Stars
- 771
- Forks
- 242
- PR merge metrics
- No merged PRs in 30d
Description
Vulnerability: https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
https://github.com/karma-runner/karma-coverage/blob/55eb8a85f8243af3ae9cf75460a780fc5c71761f/package.json#L29
Upgrade to istanbul-lib-instrument@6.0.0
Contributor guide
Assessment
This issue has not been assessed yet.