Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dependency on @serverless/utils pinned to and older version detected in yarn audit #696

Open
chitopunk opened this issue Aug 16, 2022 · 1 comment

Comments

@chitopunk
Copy link

The following interdependency causes an issue with yarn audit detecting GOT as vulnerable

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Got allows a redirect to a UNIX socket                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=11.8.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @serverless/dashboard-plugin [dev]                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @serverless/dashboard-plugin > @serverless/utils > got       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1080920                     │
└───────────────┴──────────────────────────────────────────────────────────────┘

this was already fixed in "@serverless/utils": "^6.7.0"

GHSA-pfrx-2q88-qq97

@elchesco
Copy link

+1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants