Repository navigation
Upgrade image-size package used as dependency #33934
Description
Activity
It looks like it should be less that needs to be upgraded actually
- linked a pull request that will close this issuefix(@angular-devkit/build-angular): update less to 4.9.0 #33944
on Aug 27, 2026 - linked a pull request that will close this issuefix(@angular-devkit/build-angular): update less to 4.9.0 #33943
on Aug 27, 2026 @alan-agius4 yep, thats what I did locally, will wait till this is released
- linked a pull request that will close this issuebuild: update dependency less to v4.9.0 (22.1.x) #33946
on Aug 27, 2026 - added 2 commits that reference this issue
on Aug 27, 2026
Command
build
Description
$ npm ls image-size
└─┬ @angular-devkit/build-angular@21.2.22
└─┬ less@4.4.2
└── image-size@0.5.5
@angular-devkit/build-angular is using a version of image size that has a CVE vulnerability
I can't upgrade from Angular 21, unfortunately
Describe the solution you'd like
Upgrade to latest image-size package
Describe alternatives you've considered
No response