Upgrade npm packages into package.json

Created on 8 May 2024, 7 months ago
Updated 29 May 2024, 6 months ago

Problem/Motivation

Hello Team, I can see the security issues into the package json libararies, can you please update the package.json npm packages to the latest

🐛 Bug report
Status

Closed: won't fix

Version

2.0

Component

Code

Created by

🇮🇳India vipul tulse

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • Issue created by @vipul tulse
  • 🇮🇳India vipul tulse

    docroot/modules/contrib/ckeditor_font/js/package.json decode-uri-component 0.2.0 high ["CVE-2022-38900"] js npm
    docroot/modules/contrib/ckeditor_font/js/ckeditor5_plugins/ckeditor5-font/package.json micromatch 4.0.5 high ["CVE-2024-4067"] js npm
    docroot/modules/contrib/ckeditor_font/js/package.json micromatch 3.1.10 high ["CVE-2024-4067"] js npm
    docroot/modules/contrib/ckeditor_font/js/package.json loader-utils 1.4.0 high ["CVE-2022-37601"] js npm
    docroot/modules/contrib/ckeditor_font/js/package.json unset-value 1.0.0 high [] js npm
    docroot/modules/contrib/ckeditor_font/js/package.json nth-check 1.0.2 high ["CVE-2021-3803"] js npm
    docroot/modules/contrib/ckeditor_font/js/package.json semver 6.3.0 high ["CVE-2022-25883"] js npm
    docroot/modules/contrib/ckeditor_font/js/package.json webpack 5.73.0 high ["CVE-2023-28154"] js npm
    docroot/modules/contrib/ckeditor_font/js/package.json braces 2.3.2 No remediation path available. high ["CVE-2024-4068"] js npm

    Above the issues in the package.json, team any update on upgrading those packages

  • Status changed to Closed: won't fix 6 months ago
  • 🇮🇳India vipul tulse

    This request not needed as after CKEditor plugin implementation used latest package

Production build 0.71.5 2024