You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The current version of pdfkit in use (v0.13.0) has a dependency on crypto-js@^4.0.0, which contains a known vulnerability. The pdfkit team has resolved this issue in version v0.14.0 by updating the crypto-js dependency to a secure version.
To mitigate the vulnerability, we need to upgrade pdfkit to at least version v0.14.0 in our project.
The current version of
pdfkit
in use (v0.13.0) has a dependency oncrypto-js@^4.0.0
, which contains a known vulnerability. Thepdfkit
team has resolved this issue in version v0.14.0 by updating thecrypto-js
dependency to a secure version.To mitigate the vulnerability, we need to upgrade
pdfkit
to at least version v0.14.0 in our project.pdfkit
release: https://github.com/foliojs/pdfkit/releases/tag/v0.14.0CVE-2023-46233
CVE: https://nvd.nist.gov/vuln/detail/cve-2023-46233
I tried PRing but I have no access =)
This would help resolve some security scans that're being done on our assets
The text was updated successfully, but these errors were encountered: