Skip to content

Fix security vulnerability: migrate to @turbodocx/html-to-docx#6

Open
vibecodius wants to merge 1 commit into302ai:mainfrom
vibecodius:upgrade-html-to-docx-package
Open

Fix security vulnerability: migrate to @turbodocx/html-to-docx#6
vibecodius wants to merge 1 commit into302ai:mainfrom
vibecodius:upgrade-html-to-docx-package

Conversation

@vibecodius
Copy link

Fixes #5

Resolves 302ai#5

Migrated from html-to-docx to @turbodocx/html-to-docx v1.18.1 to address
prototype pollution vulnerability (GHSA-rx8g-88g5-qh64) in transitive
dependency min-document.

Changes:
- Updated package dependency from html-to-docx@^1.8.0 to @turbodocx/html-to-docx@^1.18.1
- Updated import statement in exportDocx API route
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Transitive Dependency vulnerability

1 participant