Skip to content

Recent introduction of pdfjs-dist to the percy/cli has introduced GHSA-wgrm-67xf-hhpq #2438

Description

@spdaley

Looks like percy/cli recently introduced the pdfjs-dist library as part of #2418. Seems like the original plan was to pin it on v4 but that changed to v2 at some point? Older versions of pdfjs-dist though get flagged with GHSA-wgrm-67xf-hhpq (fixed in 4.2.67) so upgrading to percy/cli 1.32.10 now brings this audit finding into a repo.

Activity

  1. github-actions commented on Oct 6, 2026

    @github-actions
    Contributor

    This issue is stale because it has been open for more than 14 days with no activity. Remove stale label or comment or this will be closed in 14 days.

  2. khitrenovich commented on Oct 6, 2026

    @khitrenovich

    Not stale. (And IMHO, marking issues stale after just 2 weeks is a bit too aggressive for routine cleanup.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    🍞 staleClosed due to inactivity

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions