SpreadJS Designer external dependency vulnerability in Seroval introduced by SolidJS
External dependency of SpreadJS Designer, seroval, was found to have security vulnerabilities.
CVE: https://github.com/advisories/GHSA-f86p-h4j2-7qgj , https://github.com/advisories/GHSA-9wx9-5pv9-3349 , https://github.com/advisories/GHSA-97r2-qh9m-474h , https://github.com/advisories/GHSA-wp97-x4hv-qvhp , https://github.com/advisories/GHSA-7rv5-mrxv-xcr9
Remediation
Upgrade seroval to 1.6.11 or later.
Note: SpreadJS product is unaffected by these vulnerabilities but we are updating dependencies out of caution and will be released in 19.2.6. We still recommend customers update these packages immediately as well.
SpreadJS Notifications