1 person reported

All time, since Oct 21.

ESLint config retains vulnerable braces@3.0.3 dependency

“The audit is expected to exit nonzero; the advisory is the reported result.”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/next-js/issues/20312/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Full npm audits report five inherited high-severity findings for GHSA-vfj7-8cjw-p6xm via @next/eslint-plugin-next, fast-glob and micromatch.

Is this your bug?

File my report
Where
eslint-config-next
Versions
16.5.0-canary.20
Platforms
Linux
How bad
Security risk: something exposed, or done without permission.

Original reports2, newest first

  1. ESLint dependency retains vulnerable braces@3.0.3 in stable and canary Next.jsOn GitHub#100531
  2. ESLint dependency retains vulnerable braces@3.0.3 in stable and canary Next.jsOn GitHub#100497

Do you work on Next.js?

Claim its RAP Sheet to see what your users report and answer them in one place.