Skip to content

Update @sentry/bundler-plugin-core to support glob@10.5.0+ for security fix #18262

@godfrey-altmetric

Description

@godfrey-altmetric

Dependabot cannot update glob to a non-vulnerable version because @sentry/vite-plugin requires glob@^9.3.2 via a transitive dependency on @sentry/bundler-plugin-core@4.6.0. The earliest fixed version is glob@10.5.0. Please update @sentry/bundler-plugin-core or its dependencies to allow glob@10.5.0+ to resolve the security vulnerability.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels
    No fields configured for issues without a type.

    Projects

    Status

    Waiting for: Product Owner

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions