You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It would probably also be a good idea to turn on automated checks for insecure dependencies.
Yarn resolutions may be helpful here. For us, pinning request to 2.87.0 seems to fix this (request is the source of the cryptiles and mime dependencies).
The text was updated successfully, but these errors were encountered:
This project depends on vulnerable versions of
cryptiles
andmime
.Cryptiles: CVE-2018-1000620
Mime: CVE-2017-16138
It would probably also be a good idea to turn on automated checks for insecure dependencies.
Yarn resolutions may be helpful here. For us, pinning
request
to 2.87.0 seems to fix this (request
is the source of thecryptiles
andmime
dependencies).The text was updated successfully, but these errors were encountered: