Skip to content

Update monaco-editor to resolve DOMPurify CVEs #19445

@jdomeracki-coder

Description

@jdomeracki-coder

We should upgrade the version of monaco-editor from 0.52.0 to 0.52.2

"monaco-editor": "0.52.0",

This patch version introduced an upgrade of the DOMPurify html sanitizer:
https://github.com/microsoft/monaco-editor/blob/release/0.52/CHANGELOG.md#0521

To be verified if the monaco-editor/react package shouldn't be upgraded as well from 4.6.0 to 4.7.0

"@monaco-editor/react": "4.6.0",

Reference:
CVE-2024-45801

Metadata

Metadata

Labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions