-
Notifications
You must be signed in to change notification settings - Fork 861
Closed
Labels
Type: BugConfirmed bugConfirmed bug
Description
Describe the Bug
react-email depends on [email protected], which is affected by this vulnerability GHSA-67mh-4wv8-2f99.
[email protected] is no longer affected by this vulnerability and main has react-email using this version of esbuild. However, a new package version hasn't been published.
Which package is affected (leave empty if unsure)
No response
Link to the code that reproduces this issue
https://github.com/resend/react-email/blob/canary/packages/react-email/package.json#L32
To Reproduce
Install the latest react-email package (3.0.7)
Expected Behavior
react-email does not depend on packages with vulnerabilities.
What's your node version? (if relevant)
No response
davidaragundy, martin-purplefish, severinglion, alextracy, FabianFrank and 8 more
Metadata
Metadata
Assignees
Labels
Type: BugConfirmed bugConfirmed bug