Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
GHSA-h6ch-v84p-w6p9 affects the diff npm package. The file matched is the manifest of the VS Code built-in diff language extension (publisher vscode), which carries its own version number and contains only a syntax grammar and language configuration. None of the diff npm library code is present, and scanners match it only because the names are identical.
Status