npm/icu-minify: low 3.7
mcp-data-vis vulnerable to denial of service via unsanitized `select` key lookup on `Object.prototype` with `precompile: true`
Action: Upgrade icu-minify to 4.9.2 or later.
npm i icu-minify@4.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.9.2 | - |
Fixed versions
| 4.9.2 |
Sources
- osv: GHSA-r27j-894h-3w3p
- https://github.com/amannn/next-intl/security/advisories/GHSA-r27j-894h-3w3p
- https://github.com/amannn/next-intl
published · modified · JSON