Skip to content

Update monaco-editor to resolve DOMPurify CVEs #19445

@jdomeracki-coder

Description

@jdomeracki-coder

We should upgrade the version of monaco-editor from 0.52.0 to 0.52.2

"monaco-editor": "0.52.0",

This patch version introduced an upgrade of the DOMPurify html sanitizer:
https://github.com/microsoft/monaco-editor/blob/release/0.52/CHANGELOG.md#0521

To be verified if the monaco-editor/react package shouldn't be upgraded as well from 4.6.0 to 4.7.0

"@monaco-editor/react": "4.6.0",

Reference:
CVE-2024-45801

Metadata

Metadata

Labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy