Skip to content

Upgrade markdown-to-jsx to version 7.4.0 or higher. #634

Open
@brianpmccullough

Description

@brianpmccullough

Thank you for reporting an issue, suggesting an enhancement, or asking a question. We appreciate your feedback - to help the team understand your
needs please complete the below template to ensure we have the details to help. Thanks!

Please check out the documentation to see if your question is already addressed there. This will help us ensure our documentation is up to date.

Category

  • Enhancement
  • Bug
  • Question

Version

Please specify what version of the library you are using: [ 3.19 ]

Expected / Desired Behavior / Question

Update markdown-to-jsx to version 7.4.0 or higher to avoid vulnerabilities in previous versions.

Observed Behavior

NPM Audit yields Medium level vulnerability for https://www.cve.org/CVERecord?id=CVE-2024-21535

Steps to Reproduce

Create a SPFx 1.20 project (e.g. Web Part).
Add dependency to @pnp/spfx-property-controls 3.19.0
npm audit (you may need to run npm i --package-lock-only first)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions