-
Notifications
You must be signed in to change notification settings - Fork 398
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update markdown-it to >=13.0.2 #1916
Comments
I am also waiting on this one. I am facing issues with vulnerability scans in my repository due to the current version (12.3.2) of Thanks in advance! cc: @AJIXuMuK |
We are also getting this flagged in our repository due to "markdown-it" package version. Please share any updates on this. cc: @AJIXuMuK Thanks in advance! |
@michaelmaillot if you have questions or need any help with anything, please let me know. |
Any updates on this or next release of the controls? |
#1916 - Update markdown-it to >=13.0.2
Thank you for reporting an issue, suggesting an enhancement, or asking a question. We appreciate your feedback - to help the team understand your
needs please complete the below template to ensure we have the details to help. Thanks!
Please check out the documentation to see if your question is already addressed there. This will help us ensure our documentation is up to date.
Category
[ X] Enhancement
[ ] Bug
[ ] Question
Version
Please specify what version of the library you are using: [ 3.20 ]
If you are not using the latest release, please update and see if the issue is resolved before submitting an issue.
Expected / Desired Behavior / Question
If you are reporting an issue please describe the expected behavior. If you are suggesting an enhancement please
describe thoroughly the enhancement, how it can be achieved, and expected benefit. If you are asking a question, ask away!
Update markdown-it package dependency to a more recent version (>= 13.0.2) to avoid vulnerability found in currently referenced version.
https://github.com/pnp/sp-dev-fx-controls-react/blob/873aa00689eaeba8c2dc85c25c5bdcb6b03f3f00/package.json#L75C6-L75C17
https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-6483324
Observed Behavior
If you are reporting an issue please describe the behavior you expected to occur when performing the action. If you are making a
suggestion or asking a question delete this section.
N/A
Steps to Reproduce
If you are reporting an issue please describe the steps to reproduce the bug in sufficient detail to allow testing. If you are making
a suggestion or asking a question delete this section.
N/A
The text was updated successfully, but these errors were encountered: