Skip to content
This repository was archived by the owner on May 20, 2024. It is now read-only.

Comments

updated terser#103

Open
bobvdvelde wants to merge 1 commit intomainfrom
security/terser-update
Open

updated terser#103
bobvdvelde wants to merge 1 commit intomainfrom
security/terser-update

Conversation

@bobvdvelde
Copy link
Contributor

Updated Terser dependency

Closes #102


Generated a new distribution file with the dependabot suggested version bump of #102

Assumptions

  • npm audit covers required security updates

Usage / Minimal Example

Instructions on how to verify changes this PR by running code

before

npm audit

Would signal a security risk

# npm audit report

terser  5.0.0 - 5.14.1
Severity: high
Terser insecure use of regular expressions before v4.8.1 and v5.14.2 leads to ReDoS - https://github.com/advisories/GHSA-4wf5-vphf-c2xc
fix available via `npm audit fix`
node_modules/terser

1 high severity vulnerability

To address all issues, run:
  npm audit fix

after

npm audit
found 0 vulnerabilities

Checklist

  • Added tests if appropriate (and it should always be)
  • Created new issues when required

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant