Skip to content

Critical severity vulnerability when using angular-cli-ghpages@1.0.6 #185

Closed
#200
Closed
Critical severity vulnerability when using angular-cli-ghpages@1.0.6#185
#200

Description

@isahann
isahann
opened on May 6, 2024

Installed the latest version of this package, and running npm audit shows that it is using a version of gh-pages with vulnerabilities:

image

Is there any fix planned for this?

Activity

  1. fmalcher commented on May 6, 2024

    @fmalcher
    fmalcher
    on May 6, 2024
    Member

    Thanks for the report! We should upgrade the gh-pages dependency to the latest version.
    PRs are appreciated! 🙂

  2. isahann commented on May 7, 2024

    @isahann
    isahann
    on May 7, 2024
    Author

    Opened a pull request for it. Please check #186.

  3. JohannesHoppe
    closed this as completedin #200on Jan 7, 2026

  4. JohannesHoppe commented on Jan 7, 2026

    @JohannesHoppe
    JohannesHoppe
    on Jan 7, 2026
    Member

    angular-cli-ghpages v3.0.0 is out! 🎉 We upgraded gh-pages from 3.1.0 to 6.3.0, which fixes this security vulnerability. We now support Angular 18 through 21.

    npm install angular-cli-ghpages@latest --save-dev

    See: https://github.com/angular-schule/angular-cli-ghpages/releases/tag/v3.0.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions