Where should Snyk security issue be reported?

[alexbjorlig]

Snyk reports this vulnerability introduced by handlebars.

Where should this be reported?

[jaylinski]

Handlebars 4.x allows uglify-js@^3.1.4, which includes the patched version of uglify-js without vulnerabilities.

Is this report from a private project?

[alexbjorlig]

Yes - I will try update dependencies to see if the issue goes away 😅

[my-development]

@alexbjorlig Hey Alex, we have a similar vulnerability issue from our project, I'm curious if the update fixed the issue from your project. Thanks!