Skip to content

Upgrade cross-spawn from 7.0.3 to 7.0.6 to mitigate CVE-2024-21538 #427

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 28, 2025

Conversation

maverickg59
Copy link
Contributor

Upgrade cross-spawn from 7.0.3 to 7.0.6 to mitigate CVE-2024-21538

https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230

Likely not urgent, but easy fix.

Copy link

vercel bot commented Apr 27, 2025

@maverickg59 is attempting to deploy a commit to the dottle's projects Team on Vercel.

A member of the Team first needs to authorize it.

Copy link

vercel bot commented Apr 28, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
drawdb ✅ Ready (Inspect) Visit Preview 💬 Add feedback Apr 28, 2025 0:09am

Copy link
Member

@1ilit 1ilit left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@1ilit 1ilit merged commit 8b5a868 into drawdb-io:main Apr 28, 2025
4 checks passed
@maverickg59
Copy link
Contributor Author

You're welcome!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants