Skip to content

Conversation

@mickeygousset
Copy link
Contributor

This pull request includes updates to the dependencies in the haiku-src project. The most important changes involve adding a new dependency, shell-quote, to both the package.json and package-lock.json files.

@github-actions
Copy link

github-actions bot commented Dec 5, 2024

Dependency Review

The following issues were found:
  • ❌ 2 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
See the Details below.

Vulnerabilities

haiku-src/package-lock.json

NameVersionVulnerabilitySeverity
shell-quote1.7.2Improper Neutralization of Special Elements used in a Command in Shell-quotecritical

haiku-src/package.json

NameVersionVulnerabilitySeverity
shell-quote1.7.2Improper Neutralization of Special Elements used in a Command in Shell-quotecritical
shell-quote1.7.2Improper Neutralization of Special Elements used in a Command in Shell-quotecritical
Only included vulnerabilities with severity high or higher.

Scanned Manifest Files

haiku-src/package-lock.json
  • shell-quote@1.7.2
haiku-src/package.json
  • shell-quote@1.7.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants