express-cassandra icon indicating copy to clipboard operation
express-cassandra copied to clipboard

Fix of dependency high vulnerability in readdirp

Open pavelkalin opened this issue 9 months ago • 0 comments
trafficstars

readdirp 2.1.0 has this high vulnerability - https://github.com/advisories/GHSA-grv7-fg5c-xmjg

braces <3.0.3 Severity: high Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg node_modules/braces micromatch <=4.0.7 Depends on vulnerable versions of braces node_modules/micromatch readdirp 2.2.0 - 2.2.1 Depends on vulnerable versions of micromatch node_modules/readdirp

npm list braces micromatch readdirp --depth=5 └─┬ [email protected] └─┬ [email protected] └─┬ [email protected] └── [email protected]

If readdirp could be updated to higher version - it would resolve this issue

pavelkalin avatar Feb 12 '25 11:02 pavelkalin