Skip to content

qrcode uses an outdated version or yargs with a vulnerable transitive dependency #374

Open
#408
Open
qrcode uses an outdated version or yargs with a vulnerable transitive dependency#374
#408

Description

@davidsyckle
davidsyckle
opened on Sep 10, 2024

qrcode uses a direct dependency ("yargs": "^15.3.1") that pulls in a vulnerable component (y18n@4.0.3). Please update yargs to 17.0.2 or newer to remediate this issue. :)

Activity

  1. MoggyPersonal commented on Mar 18, 2025

    @MoggyPersonal
    MoggyPersonal
    on Mar 18, 2025

    This is showing a critical vulnerability for us in AWS Inspector, please can this be soon, given it was raised in Sept 24

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions