Report of a vulnerability in Hull.js from G6

[bartoval]

Hello,
I'm posting this here, but honestly I am not totally sure that this is the right section. In that case, apologies for the confusion :)

Vulnerability scanners and yarn audit have identified a critical vulnerability in hull.js, a dependency of Ant G6, on one of our projects.
Will Antvis G6 be updated to include a patched version of hull.js? Note: the last version of hull.js published is v1.06 but the patch is contained in the version 1.10 which is not included in the npm registry

[petercat-assistant[bot]]

I found an existing issue related to the vulnerability in hull.js within the AntV G6 repository. You can follow the discussion and any updates regarding this issue through the following link: Issue #6605 - [Bug]: hull.js Code Injection Vulnerability.

It would be beneficial to keep an eye on this issue for any updates or resolutions provided by the maintainers. If you have any further questions or need additional assistance, feel free to ask.

🪧 Tips

For further assistance, please describe your question in the comments and @petercat-assistant to start a conversation with me.

[bartoval]

Never mind, I found the post with the fix :)