New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

You're using a dependency which uses ejs v3.1.9, Which is vulnerable to server-side template injection #156

Closed

endlacer opened this issue Nov 17, 2023 · 1 comment

endlacer commented Nov 17, 2023

Is it necassary to use @nx/devkit ?

GHSA-j5pp-6f4w-r5r6

Collaborator

nartc commented Nov 17, 2023

ejs is used by the nx/devkit for running generators which are only ran on the dev machine so the vulnerability is irrelevant to ngxtension

nartc closed this as completed

nartc closed this as not planned

Kaemmelot mentioned this issue

Inflated dependency tree when using ngxtension #304

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment