Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update cross-env to fix vulnerability in cross-spawn #7979

Open
IchordeDionysos opened this issue Nov 21, 2024 · 1 comment
Open

Update cross-env to fix vulnerability in cross-spawn #7979

IchordeDionysos opened this issue Nov 21, 2024 · 1 comment
Assignees
@joehan
Labels
api: core type: bug

Comments

@IchordeDionysos
Copy link
Contributor

[REQUIRED] Environment info

firebase-tools: 13.26.0

Platform: macOS

cross-spawn has a vulnerability <7.0.5. firebase-tools depends on cross-spawn also transitively via a dependency on cross-env.

The current version of cross-env: ^5.1.3 used depends on version 6.x.x of cross-spawn.
To allow installing a fixed version of cross-spawn, cross-env should be updated to the latest version, which depends on cross-spawn: ^7.0.1.

image
@google-oss-bot
Copy link
Contributor

This issue does not seem to follow the issue template. Make sure you provide all the required information.

@joehan joehan self-assigned this Nov 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@joehan joehan

Labels
api: core type: bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@joehan @IchordeDionysos @google-oss-bot @jbalidiong