Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade markdown-to-jsx to version 7.4.0 or higher. #634

Open
1 of 3 tasks
brianpmccullough opened this issue Jan 9, 2025 · 0 comments · May be fixed by #635
Open
1 of 3 tasks

Upgrade markdown-to-jsx to version 7.4.0 or higher. #634

brianpmccullough opened this issue Jan 9, 2025 · 0 comments · May be fixed by #635

Comments

@brianpmccullough
Copy link

Thank you for reporting an issue, suggesting an enhancement, or asking a question. We appreciate your feedback - to help the team understand your
needs please complete the below template to ensure we have the details to help. Thanks!

Please check out the documentation to see if your question is already addressed there. This will help us ensure our documentation is up to date.

Category

  • Enhancement
  • Bug
  • Question

Version

Please specify what version of the library you are using: [ 3.19 ]

Expected / Desired Behavior / Question

Update markdown-to-jsx to version 7.4.0 or higher to avoid vulnerabilities in previous versions.

Observed Behavior

NPM Audit yields Medium level vulnerability for https://www.cve.org/CVERecord?id=CVE-2024-21535

Steps to Reproduce

Create a SPFx 1.20 project (e.g. Web Part).
Add dependency to @pnp/spfx-property-controls 3.19.0
npm audit (you may need to run npm i --package-lock-only first)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant