-
Notifications
You must be signed in to change notification settings - Fork 4.7k
Closed
Description
It doesn't appear that the uses of diff in Gutenberg packages are affected by the vulnerability, as the vulnerability affects the parsePatch and applyPatch functions while Gutenberg uses only diffChars and the Change type.
| import { diffChars } from 'diff/lib/diff/character'; |
gutenberg/packages/sync/src/quill-delta/Delta.ts
Lines 10 to 11 in e4b7728
| import type { Change } from 'diff'; | |
| import { diffChars } from 'diff'; |
Regardless, I'd appreciate if you'd update the dependency so Dependabot stops complaining about it in our repo. Thanks!
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels
Type
Fields
Give feedbackNo fields configured for issues without a type.