Open source maintainer pulls the plug on npm packages colors and faker, now what?

2022-01-10来源 Snyk BlogEnglish
Open source maintainer pulls the plug on npm packages colors and faker, now what?
Snyk issued a Denial of Service security vulnerability for colors@1.4.1, following this vulnerable code. We highly recommend you revert to colors@1.4.0, and pin your dependencies’ versions to avoid blind upgrades of the offending version. We also recommend you migrate to a different package.

原文：https://www.a8q9.cn/en/article/open-source-maintainer-pulls-the-plug-on-npm-packages-colors-and-faker-now-what-b5e33c.html

相关文章