ExpressGateway / express-gateway

A microservices API Gateway built on top of Express.js
https://www.express-gateway.io
Apache License 2.0
2.96k stars 344 forks source link

[Question] glob-parent Vulnerability #1039

Open m-balaban opened 2 years ago

m-balaban commented 2 years ago

glob-parent vulnerability CVE-2020-28469

├─┬ express-gateway@1.16.11 │ ├─┬ chokidar@3.5.2 │ │ └── glob-parent@5.1.2 │ └─┬ yeoman-environment@2.10.3 │ └─┬ globby@8.0.2 │ └─┬ fast-glob@2.2.7 │ └── glob-parent@3.1.0 <-----

Can the yeoman-environment dependancy be updated? We are unable to release with this vulnerability. A resolution within the next month would be greatly appreciated.