GHSA-73rr-hh4g-fpgx
It doesn't appear that the uses of diff in Gutenberg packages are affected by the vulnerability, as the vulnerability affects the parsePatch and applyPatch functions while Gutenberg uses only diffChars and the Change type.
|
import { diffChars } from 'diff/lib/diff/character'; |
|
import type { Change } from 'diff'; |
|
import { diffChars } from 'diff'; |
Regardless, I'd appreciate if you'd update the dependency so Dependabot stops complaining about it in our repo. Thanks!
GHSA-73rr-hh4g-fpgx
It doesn't appear that the uses of
diffin Gutenberg packages are affected by the vulnerability, as the vulnerability affects theparsePatchandapplyPatchfunctions while Gutenberg uses onlydiffCharsand theChangetype.gutenberg/packages/block-editor/src/components/block-compare/index.js
Line 7 in e4b7728
gutenberg/packages/sync/src/quill-delta/Delta.ts
Lines 10 to 11 in e4b7728
Regardless, I'd appreciate if you'd update the dependency so Dependabot stops complaining about it in our repo. Thanks!