Snyk Blog company blog
Open source maintainer pulls the plug on NPM packages colors and faker
Snyk issued a Denial of Service security vulnerability for colors@1.4.1, following this vulnerable code. We highly recommend you revert to colors@1.4.0, and pin your dependencies’ versions to avoid blind upgrades of the offending version. We also recommend you migrate to a different package.
- Points
- 215
- HN comments
- 14
- Submissions
- 1
- Cited by
- 0 commenters
Open SourceSoftware Engineering2022
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jan 9, 2022 | Open source maintainer pulls the plug on NPM packages colors and faker by arnon | 215 | 14 |
