Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnarability issue in package d3-5.16.0.tgz which dagre-d3-0.6.4.tgz package is using #433

Open
vbhvag opened this issue Dec 16, 2022 · 3 comments
Open

Vulnarability issue in package d3-5.16.0.tgz which dagre-d3-0.6.4.tgz package is using #433

vbhvag opened this issue Dec 16, 2022 · 3 comments

Comments

@vbhvag
Copy link

vbhvag commented Dec 16, 2022

Hi Team

Please update d3-5.16.0.tgz to its latest version in dagre-d3-0.6.4.tgz package there is a vulnerability issue for the package.

image

Thanks,
Vaibhav Agrawal
@tbo47
Copy link

tbo47 commented Dec 16, 2022

My fork use the latest version of D3 https://github.com/tbo47/dagre-es

@DaanDL
Copy link

DaanDL commented Oct 26, 2023

That's not a workeable solution as it's used by mermaid, which is used by markdown libaries.

@tbo47
Copy link

tbo47 commented Nov 3, 2023

Are you sure?
It is not in the latest version:
https://github.com/mermaid-js/mermaid/blob/develop/packages/mermaid/package.json#L70

@Robert-96 Robert-96 mentioned this issue Dec 2, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@tbo47 @DaanDL @vbhvag