Comments (3)
LukasTy
commented on June 11, 2024
Hello @satinder1624.
It does not seem that we can do anything on our end, because we have the exceljs dependency, and it did not update the archiver package.
Have you considered adding resolutions (yarn) / overrides (pnpm) / overrides (npm, available from v8.3) for the archiver package to avoid this vulnerability concern?
Naturally, you'd need to double-check if Excel export still works without problems after this on your end, but it seems that the only thing that changed between the majors is the dropping of node<14 support. 🤷
from mui-x.
satinder1624
commented on June 11, 2024
Hello Lucas,
Thanks for giving me the hint of adding a resolution. But I have few
questions regarding that. It will only solve the vulnerability or does it
update the version for my app?
What should I write to add a resolution for that vulnerability?
Because vulnerability coming by x-data-grid-generator package
…On Wed, Apr 24, 2024 at 3:33 AM Lukas ***@***.***> wrote:
Hello @satinder1624 <https://github.com/satinder1624>.
It does not seem that we can do anything on our end, because we have the
exceljs dependency, and it did not update
<exceljs/exceljs#2715> the archiver package.
Have you considered adding resolutions
<https://classic.yarnpkg.com/lang/en/docs/selective-version-resolutions/>
(yarn)/overrides <https://pnpm.io/package_json#pnpmoverrides> (pnpm) /
overrides
<https://docs.npmjs.com/cli/v9/configuring-npm/package-json#overrides>
(npm available from v8.3) for the archiver package to avoid this
vulnerability concern?
Naturally, you'd need to double-check if Excel export still works without
problems after this on your end, but it seems that the only thing that changed
between the majors <https://github.com/archiverjs/node-archiver/releases>
is the dropping of node<14 support. 🤷
—
Reply to this email directly, view it on GitHub
<#12887 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/ARQXZFCWABUFEOWUD5LTQPDY65N4LAVCNFSM6AAAAABGVTYYSSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDANZUGI3TCOJYGY>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
from mui-x.
michelengelen
commented on June 11, 2024
@satinder1624 as @LukasTy we cannot do anything on our end. We just import and use the exceljs package which has the vulnerability. You can add the workaround provided by @LukasTy and ideally open an issue on the exceljs repo for them to update the dependency list or upvote the existing issue.
from mui-x.
Related Issues (20)
- [pickers][DateTimeRangePicker] trying to target the digitalClockSectionItem for styling HOT 5
- [charts][Linechart] Horizontal overflow on mobile HOT 4
- [Datagrid] Poor mount performance on Safari HOT 3
- [data grid] Row does not get selected when clicking on action cell HOT 2
- [docs] Initialize the quick filter values -> ['quick', 'filter'] should be ['ab'] HOT 1
- [data grid] Change clipboard copy behaviour/precedence? HOT 2
- [data grid] Why is GridValueFormatter defaulting the value to never? HOT 5
- [docs] Improve slots and layout customization examples HOT 1
- [charts] Fix TS performances HOT 3
- [data grid] Excel Export Is not Disabled Per Configuration HOT 4
- [data grid] The bottom pinned row in a data grid does not stay at the bottom when there aren't any other rows in the data set HOT 5
- [charts][PieChart] `prop.slots` and `prop.slotProps` not passed to `<ChartsTooltip />` HOT 2
- [data grid] GridColDef valueGetter method's value parameter is always never HOT 4
- [data grid] pagination add jump input HOT 1
- [data grid] How to Avoid column readjustment HOT 11
- [code-infra] "pnpm test" works poorly HOT 4
- [data grid] pageSize is reset to zero with enabled autoPageSize and there is enough room on the page for a larger page size HOT 5
- How can I write a controlled filter for a boolean field? HOT 1
- [question] valueFormatter does not work in DataGridPremium, but it works in DataGrid. HOT 2
- [data grid] Column autosizing calculated on old data instead of new data
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from mui-x.