https://bugzilla.suse.com/show_bug.cgi?id=1224303 https://bugzilla.suse.com/show_bug.cgi?id=1224303#c2 Benjamin Greiner <code@bnavigator.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WONTFIX --- Comment #2 from Benjamin Greiner <code@bnavigator.de> --- Bogus CVE. See upstream discussion at micromatch. Only pulled in by devDependencies, not shipped at runtime. -- You are receiving this mail because: You are on the CC list for the bug.