fs-routes is using a vulnerable version of glob

[andreainnocenti]

Hi team! My service use openapi-framework which is based on fs-routes. The latest version of fs-routes has as dependcy an outdated version of glob (https://github.com/kogosoftwarellc/open-api/blob/v12.1.3/packages/fs-routes/package.json#L31). This version has a vulnerability that was fixed in glob v9+.

The vulnerability is https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116.

Is it possible to fix this vulnerability?
Thanks!

[mkrudele]

Any chance we can get this issue fixed? It should be enough merging the PR and publish a new release.

[tildadavillglas]

Hello, we're also facing this issue - are there any updates on this? glob < v9 causes compatibility issues with e.g. vitest, which my team is using for testing. This has unfortunately led to us looking for other alternatives.