Skip to content

Conversation

sunsheeppoplar
Copy link

@sunsheeppoplar sunsheeppoplar commented Sep 6, 2024

Addressing https://www.cve.org/CVERecord?id=CVE-2024-42459

Also made a related PR with same update

@ljharb
Copy link
Member

ljharb commented Sep 6, 2024

These PRs are simply never necessary and should never be submitted.

The dependency is using a ^ range, so all you need to do is update your lockfile - nothing needs to be done here.

@ljharb ljharb closed this Sep 6, 2024
@sunsheeppoplar
Copy link
Author

@ljharb Thanks. I realized you had been saying the same to others in other PRs, appreciate the feedback, sorry for the noise!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants