-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Conversation
|
@diasdavid This is going to be blocked until browserify/static-module#35 (or similar) is merged, we then need to propagate those changes over the dependency tree. |
@dryajov this PR is not the one introducing that dependency, what do you mean by blocked? |
blocking in the sense that we probably shouldn't release js-ipfs without this fixed. But your right, we should not hold this PR because of it. |
Without giving away too many details, can someone cliff notes the vulnerability / severity? |
@attritionorg here you go - https://nodesecurity.io/orgs/ipfs/projects/f983c9d5-424b-436a-ae6f-733dddb9ad08/1042. Keep in mind, this is a vulnerability in the |
@dryajov Excellent, thank you! |
* fix: fix progress bar flakiness * feat: reuse createAddPullStream to avoid code duplication
this resolves #1041