Skip to content
This repository was archived by the owner on Sep 2, 2022. It is now read-only.

Conversation

@gustawdaniel
Copy link

@gustawdaniel gustawdaniel commented Jun 22, 2019

┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ marked                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.6.2                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ prisma                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ prisma > prisma-cli-engine > marked                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/812                             │
└───────────────┴──────────────────────────────────────────────────────────────┘

markedjs/marked#1460

lpedromachado and others added 2 commits May 30, 2019 12:35
┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ marked                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.6.2                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ prisma                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ prisma > prisma-cli-engine > marked                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/812                             │
└───────────────┴──────────────────────────────────────────────────────────────┘

> markedjs/marked#1460
@CLAassistant
Copy link

CLAassistant commented Jun 22, 2019

CLA assistant check
Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ gustawdaniel
❌ lpedromachado
You have signed the CLA already but the status is still pending? Let us recheck it.

@gustawdaniel
Copy link
Author

@lpedromachado you need to sign license agreement if we want to merge this pull request.

@gustawdaniel
Copy link
Author

Because of maintenance mode I would like to please anyone for making decision if we can merge it or close this pull request.

https://github.com/prisma/prisma/issues/4898

@janpio janpio closed this Sep 1, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants