Skip to content

Update rollup-plugin-terser to fix vulnerability #797

Closed
#889
Closed
Update rollup-plugin-terser to fix vulnerability#797
#889
Labels
scope: dependenciesPull requests that update a dependency filesolution: duplicateThis issue or pull request already existstopic: Rollup 2Related to Rollup 2 upgrade
Milestone
v0.15.0 - Rollup 2 + multi-entry + `preserveModules`

Description

@known-as-bmf
known-as-bmf
opened on Aug 14, 2020

Current Behavior

rollup-plugin-terser v5.x has a dependency on serialize-javascript 2.x.
This version of serialize-javascript includes an high severity security issue.

Expected behavior

No security issue.

Suggested solution(s)

Bump rollup-plugin-terser dependency to at least ^6.0.0.

Additional context

N/A

Your environment

TSDX 0.13.2

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    scope: dependenciesPull requests that update a dependency filesolution: duplicateThis issue or pull request already existstopic: Rollup 2Related to Rollup 2 upgrade

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions