Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: Vulnerability in micromatch dependency #4617

Closed
2 tasks done
adam-jijo-swym opened this issue Oct 9, 2024 · 0 comments · Fixed by #4646
Closed
2 tasks done

[Bug]: Vulnerability in micromatch dependency #4617

adam-jijo-swym opened this issue Oct 9, 2024 · 0 comments · Fixed by #4646
Labels
Type: Bug Something isn't working

Comments

@adam-jijo-swym
Copy link

Please confirm that you have:

  • Searched existing issues to see if your issue is a duplicate. (If you’ve found a duplicate issue, feel free to add additional information in a comment on it.)
  • Reproduced the issue in the latest CLI version.

In which of these areas are you experiencing a problem?

Other

Expected behavior

@shopify/cli should pass npm audit.

Actual behavior

@shopify/cli depends on [email protected] with known vulnerability CVE-2024-4067.

Verbose output

├─┬ @shopify/[email protected]
│ └─┬ @parcel/[email protected]
│   └── [email protected]

Reproduction steps

  1. Run npm audit.
  2. Observe micromatch vulnerability
  3. Run npm ls micromatch

Operating System

Mac OS

Shopify CLI version (check your project's package.json if you're not sure)

3.68.0

Shell

zsh

Node version (run node -v if you're not sure)

22.2.0

What language and version are you using in your application?

Node 22.2

@adam-jijo-swym adam-jijo-swym added the Type: Bug Something isn't working label Oct 9, 2024
@isaacroldan isaacroldan mentioned this issue Oct 15, 2024
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant