Closed Bug 1617967 Opened 6 years ago Closed 6 years ago

Handlebars 4.1.2 is vulnerable

Categories

(DevTools :: Debugger, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED WONTFIX

People

(Reporter: hwine, Unassigned)

Details

This a manual repost of dependabot finding. That PR is closed as it is not actionable on the GitHub side.

Component: General → Debugger

The priority flag is not set for this bug.
:jlast, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(jlaster)

handlebars is a sub-dependency of our test-runner jest. it is not used in firefox and as a result, i don't think it should be an issue.

Happy to discuss if anyone disagrees.

Status: NEW → RESOLVED
Closed: 6 years ago
Flags: needinfo?(jlaster)
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.