Skip to content

Update cross-env to fix vulnerability in cross-spawn #7979

Description

@IchordeDionysos

[REQUIRED] Environment info

firebase-tools: 13.26.0

Platform: macOS

cross-spawn has a vulnerability <7.0.5. firebase-tools depends on cross-spawn also transitively via a dependency on cross-env.

The current version of cross-env: ^5.1.3 used depends on version 6.x.x of cross-spawn.
To allow installing a fixed version of cross-spawn, cross-env should be updated to the latest version, which depends on cross-spawn: ^7.0.1.

image

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions