javascript
javascript copied to clipboard
Fix CVE in jsonpath-plus (again)
Describe the bug
The jsonpath-plus dependency contains a critical CVE, even after upgrading to 10.0.0
: CVE-2024-21534
The library has been fixed as of version 10.0.7 or higher.
There's an open dependabot PR for resolution.
** Client Version **
0.22.1
Environment (please complete the following information):
- NodeJS Client
Additional context
- Previous fix: https://github.com/kubernetes-client/javascript/issues/1926