serverless-plugin-browserifier
serverless-plugin-browserifier copied to clipboard
Async package with high vulnerability issue
Hi everyone, good afternoon.
It seems that there is a vulnerability issue with the async
package as we can see below with the npm audit
command:
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Prototype Pollution in async │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ async │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=3.2.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ serverless-plugin-browserifier [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ serverless-plugin-browserifier > archiver > async │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-fwr7-v2mv-hh25 │
└───────────────┴──────────────────────────────────────────────────────────────┘
Did you guys have the chance to look at this? Thank you, Regards.
I've just deployed a new version. Hopefully it is solved.