Skip to content

Critical Severity Vulnerability in intersection-observer #1268

@salzpate

Description

@salzpate

We actually want to use mdxeditor, which uses @codesandbox/sandpack-react as dependency.

@react-hook/intersection-observer currently still uses a polyfill for the intersection observer. However, we have now received information that the intersection observer contained therein is highly vulnerable. This means that we are not allowed to use MdxEditor.
I have also created an issue for this at @react-hook, but wanted to ask if you could update to a newer version or, alternatively (if no version with a fix is released), switch to an alternative solution.
I would be happy to assist you with this.

See: jaredLunde/react-hook#318

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions