Skip to content

Security vulnerability in @definitelytyped/utils dependency tar #347

New issue
New issue
Closed
#446
Closed
Security vulnerability in @definitelytyped/utils dependency tar#347
#446

Description

@sherwinski
Sherwin Heydarbeygi (sherwinski)
opened on Nov 16, 2021

@definitelytyped/utils requires "tar": "^2.2.2" which has an Arbitrary File Creation/Overwrite vulnerability.

Please consider upgrading it order to fix this vulnerability.

image

Activity

  1. sherwinski commented on Nov 17, 2021

    @sherwinski
    Sherwin Heydarbeygi (sherwinski)
    on Nov 17, 2021
    Author

    Just realized a PR already exists to address this #308

  2. Nathan Shively-Sanders (sandersn)
    added 2 commits that reference this issue on Nov 29, 2021

    Fix typo in tsconfig.json example (#347)

    ffad8fc

    Add dtslint/dts-critic to the monorepo (#353)

    dae5c76
  3. Nathan Shively-Sanders (sandersn)
    closed this as completedin #446on May 4, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions