From 43cb1b9db892e83dc2c512b089cd2e8a32f07411 Mon Sep 17 00:00:00 2001 From: Matan Borenkraout Date: Sun, 23 Jan 2022 10:14:50 +0200 Subject: [PATCH] chore: fix a security vulnerability in `node-fetch` prior to 2.6.7 A security issue was found in `node-fetch` versions up to 2.6.6 A fix was patched in 2.6.7: https://github.com/node-fetch/node-fetch/issues/1467 More about the vulnerability: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-0235 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index fc2b08f0a..8f5b6c1b7 100644 --- a/package.json +++ b/package.json @@ -77,7 +77,7 @@ "inquirer": "^8.2.0", "is-node-process": "^1.0.1", "js-levenshtein": "^1.1.6", - "node-fetch": "^2.6.1", + "node-fetch": "^2.6.7", "path-to-regexp": "^6.2.0", "statuses": "^2.0.0", "strict-event-emitter": "^0.2.0",