Description
Is there an existing issue for this?
- I have searched the existing issues
Description
gethue package uses babel/traverse dependency that has critical security issue. Please update your babel/traverse dependency to a version that has at least the fixed critical vulnerability
Steps To Reproduce
- install gethue npm package
- run npm/pnpm/yarn audit
- You will see gethue at the top of critical vulnerabilities due to babel/traverse
Logs
Paths
│ . > gethue@6.0.1 > babel-preset-react-app@3.1.2 > │
│ │ babel-plugin-dynamic-import-node@1.1.0 > │
│ │ babel-template@6.26.0 > babel-traverse@6.26.0 │
│ │ │
│ │ . > gethue@6.0.1 > babel-preset-react-app@3.1.2 > │
│ │ babel-plugin-transform-class-properties@6.24.1 > │
│ │ babel-helper-function-name@6.24.1 > │
│ │ babel-template@6.26.0 > babel-traverse@6.26.0 │
│ │ │
│ │ . > gethue@6.0.1 > babel-preset-react-app@3.1.2 > │
│ │ babel-plugin-transform-class-properties@6.24.1 > │
│ │ babel-helper-function-name@6.24.1 > │
│ │ babel-traverse@6.26.0
there's 34 more paths that use babel/traverse in gethue but you get the idea
Hue version
6.0.1
Activity