Esbuild package inside Angular has vulnerabilities

Discussão em 'Angular' iniciado por Ravi Sharma, Agosto 30, 2025.

  1. Ravi Sharma

    Ravi Sharma Guest

    I have updated Angular to its latest version 16.2.7 but Esbuild package inside angular-devkit/build-angular package has vulnerabilities. I can ignore those and deploy my project but my company has standard that code must be passed through Google scan so what should I do now? Below is the version info:

    @angular-devkit/build-angular@16.2.7
    +-- esbuild@0.18.17
    `-- vite@4.4.7
    `-- esbuild@0.18.17 deduped


    Google scanner says that if esbuild version is 0.19.5 then there is no vulnerabilities. I cannot update esbuild alone because it's a child package of angular-devkit/build-angular.

    Continue reading...

Compartilhe esta Página