Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade moment.js dependency due to security vulnerability #3101

Closed
fbarl opened this issue Mar 6, 2018 · 2 comments
Closed

Upgrade moment.js dependency due to security vulnerability #3101

fbarl opened this issue Mar 6, 2018 · 2 comments
Assignees
@fbarl
Labels
chore Related to fix/refinement/improvement of end user or new/existing developer functionality

Comments

@fbarl
Copy link
Contributor

fbarl commented Mar 6, 2018

Github reports:

image

p.s. Should also bump ui-components version to make sure no old moment.js versions are persisted.
@fbarl fbarl added the chore Related to fix/refinement/improvement of end user or new/existing developer functionality label Mar 6, 2018
@fbarl fbarl self-assigned this Mar 6, 2018
@fbarl fbarl mentioned this issue Mar 7, 2018
Merged
@bboreham
Copy link
Collaborator

It would be useful to have the CVE linked here so we know which vulnerability.

@fbarl
Copy link
Contributor Author

fbarl commented Mar 12, 2018

It would be useful to have the CVE linked here so we know which vulnerability.

I think this was it: moment/moment#4163

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@fbarl fbarl

Labels
chore Related to fix/refinement/improvement of end user or new/existing developer functionality
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@fbarl @bboreham