Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

css-what vulnerability #237

Open
PiyushMishra318 opened this issue Jun 25, 2021 · 5 comments
Open

css-what vulnerability #237

PiyushMishra318 opened this issue Jun 25, 2021 · 5 comments

Comments

@PiyushMishra318
Copy link

for version 5.0.0 I have vulnerabilities with css-what
image

@bezoerb
Copy link
Owner

bezoerb commented Jun 25, 2021

This needs to be fixed upstream in svgo

@PiyushMishra318
Copy link
Author

PiyushMishra318 commented Jun 26, 2021

Yeah, I realized that and left an issue there as well.

I hope you don't mind me creating another package for the postcss-image-inliner.

If you do I can take it down or if you want me to modify the npm docs let me know.

@bezoerb
Copy link
Owner

bezoerb commented Jun 26, 2021

Why would you need another package for that?

@PiyushMishra318
Copy link
Author

I'm using critical which has your package as one of its dependencies let me know if there is a better way of doing this. Because I too felt that this isn't really efficient

@PiyushMishra318
Copy link
Author

I'm removing the package looks like most of the packages have these vulnerability issues even some of the biggest ones like react and such.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants