13.3.8 build_angular uses vulnerable terser 5.11.0: CVE-2022-25858 #23593

Closed

Assignees

Labels

area: @angular-devkit/build-angularfreq1: lowseverity6: securitytype: bug/fix

opened

on Jul 18, 2022

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25858

Hi,

is it possible to update terser in 13.3.x branch?
https://github.com/angular/angular-cli/blob/13.3.x/packages/angular_devkit/build_angular/package.json

Thanks!

Metadata

Assignees

alan-agius4

Labels

area: @angular-devkit/build-angularfreq1: lowseverity6: securitytype: bug/fix

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests