You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Jul 19, 2021. It is now read-only.
We're using this library (thank you very much 馃檹 ) but when we run an OWASP (Open Web Application Security Project) scan on it, it detects a vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2020-28477. This vulnerability is in the immer package which is used by react-dev-utils@7.0.5. The last version of react-dev-utils doesn't use immer anymore. So I was wondering if you could update to react-dev-utils@11.0.3 (currently the highest). I can also try to submit a PR but I don't know how to check that it doesn't break anything.
Hi 馃槃
We're using this library (thank you very much 馃檹 ) but when we run an OWASP (Open Web Application Security Project) scan on it, it detects a vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2020-28477. This vulnerability is in the
immerpackage which is used byreact-dev-utils@7.0.5. The last version ofreact-dev-utilsdoesn't useimmeranymore. So I was wondering if you could update toreact-dev-utils@11.0.3(currently the highest). I can also try to submit a PR but I don't know how to check that it doesn't break anything.Thank you for your help.