New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix jimp high-severity error caused by lqip #283

Open

mijorus opened this issue Dec 1, 2020 · 0 comments

mijorus commented Dec 1, 2020 •

edited

Describe the bug
lqip depends on an outdated version of jimp, that includes url-regex, a library with an High-severity vulnerability.

To Reproduce
Install lqip-loader

Additional context
Possible fix: require @memrise/lqip-loader this unofficial community package instead

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment