-
-
Notifications
You must be signed in to change notification settings - Fork 230
Open
Description
Is it time to drop sync-request from this project?
Recently github notified me about a vulnerability introduced by markdown-magic through sync-request (which has not been updated in 6 years), that ultimately came from an ancient form-data 2. 5 version. It was nothing to worry about because, as far as I know, markdown-magic doesn't even use sync-request. The only file making a reference is packages/core/src/utils/remoteRequest.js but remoteRequestSync does not seem to be used anywhere.
zijianzz
Metadata
Metadata
Assignees
Labels
No labels