Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ejs to version 3.1.8 #53

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Conversation

afrojuju1
Copy link

Description: Updated ejs to version 3.1.8 to resolve a critical github issue

  • This resolves issues the Github issue mentioned here
  • And also the issue mentioned here

@afrojuju1 afrojuju1 requested a review from surma as a code owner May 31, 2022 15:39
@DhamodharanJaganathan
Copy link

Description: Updated ejs to version 3.1.8 to resolve a critical github issue

* This resolves issues the Github issue mentioned [here](https://github.com/advisories/GHSA-phwq-j96m-2c2q)

* And also the issue mentioned [here](https://github.com/surma/rollup-plugin-off-main-thread/issues/52)

Please accept the PR ASAP

@jessepinuelas
Copy link

@surma this PR was opened on May 31st, any chance you can review this EJS dependency bump? It solves a critical vulnerability in EJS.

@skgbafa
Copy link

skgbafa commented Dec 7, 2022

Bumping as this is still an issue @surma 🙂

@gcolclough
Copy link

@surma would be a big help if you could approve this as it is showing up as a critical vulnerability with a quick fix. Thanks.

@sergei-lobanov
Copy link

@surma any updates on this please?

@fredericboisguerin2022
Copy link

Could we merge it and release please?

@ianpandis
Copy link

Still waiting for this to get merged

Trickfilm400 added a commit to Trickfilm400/rollup-plugin-off-main-thread that referenced this pull request May 22, 2024
fix: surma#56
fix: surma#54
references: surma#57
fix: surma#52
references: surma#53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants