Skip to content
onsuggest
Log in
Article en

The Bun CVE Gap, Closed: Surgical Updates Land in Bun 1.4

Source: Nicolas Charpentier's Blog ·

Three months ago, I wrote that Bun was the only mainstream package manager that couldn't do surgical CVE remediation. Bun 1.4 ships in-place transitive updates, bun audit fix, and nested overrides. Time to re-run the original reproductions.

Keyboard shortcuts

Previous discovery
←P
Next discovery
→N
Like
L
Not for me
X
Save
S
Show this help
?
Close
Esc

Shortcuts work on the discovery page.