express-cassandra
express-cassandra copied to clipboard
Fix of dependency high vulnerability in readdirp
trafficstars
readdirp 2.1.0 has this high vulnerability - https://github.com/advisories/GHSA-grv7-fg5c-xmjg
braces <3.0.3 Severity: high Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg node_modules/braces micromatch <=4.0.7 Depends on vulnerable versions of braces node_modules/micromatch readdirp 2.2.0 - 2.2.1 Depends on vulnerable versions of micromatch node_modules/readdirp
npm list braces micromatch readdirp --depth=5 └─┬ [email protected] └─┬ [email protected] └─┬ [email protected] └── [email protected]
If readdirp could be updated to higher version - it would resolve this issue