You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
Not really a bug, but a warning on npm audit when installing @sourceloop/cache.
send <0.19.0
send vulnerable to template injection that can lead to XSS - https://github.com/advisories/GHSA-m6fv-jmcg-4jfg
fix available via `npm audit fix --force`
Will install @sourceloop/[email protected], which is a breaking change
node_modules/swagger-stats/node_modules/send
swagger-stats >=0.95.8
Depends on vulnerable versions of send
node_modules/swagger-stats
@sourceloop/core *
Depends on vulnerable versions of swagger-stats
node_modules/@sourceloop/core
@sourceloop/cache >=2.1.0
Depends on vulnerable versions of @sourceloop/core
node_modules/@sourceloop/cache
I know it's a low severity vulnerability, and I know it depends on swagger-stats, but you may want to keep monitored that dep for then updating @sourceloop/core, and in turns @sourceloop/cache.
The text was updated successfully, but these errors were encountered:
Describe the bug
Not really a bug, but a warning on
npm audit
when installing@sourceloop/cache
.I know it's a low severity vulnerability, and I know it depends on swagger-stats, but you may want to keep monitored that dep for then updating @sourceloop/core, and in turns @sourceloop/cache.
The text was updated successfully, but these errors were encountered: