Skip to content

react-email depends on a vulnerable version of esbuild #1962

@dsaltares

Description

@dsaltares

Describe the Bug

react-email depends on [email protected], which is affected by this vulnerability GHSA-67mh-4wv8-2f99.
[email protected] is no longer affected by this vulnerability and main has react-email using this version of esbuild. However, a new package version hasn't been published.

Which package is affected (leave empty if unsure)

No response

Link to the code that reproduces this issue

https://github.com/resend/react-email/blob/canary/packages/react-email/package.json#L32

To Reproduce

Install the latest react-email package (3.0.7)

Expected Behavior

react-email does not depend on packages with vulnerabilities.

What's your node version? (if relevant)

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions