Experience-Monks / nice-color-palettes

nice colour palettes as JSON
MIT License
916 stars 77 forks source link

Vulnerability in got #6

Open MatthewClark2 opened 2 years ago

MatthewClark2 commented 2 years ago
got  <11.8.5
Severity: moderate
Got allows a redirect to a UNIX socket - https://github.com/advisories/GHSA-pfrx-2q88-qq97
fix available via `npm audit fix --force`
Will install got@12.1.0, which is a breaking change
node_modules/got

This is mostly an issue for downstream dependents. Considering that this is a breaking change, it may be easier to shuffle dependencies as mentioned in issue 5 and leave the issue for later.