GoogleChrome / workbox

📦 Workbox: JavaScript libraries for Progressive Web Apps
https://developers.google.com/web/tools/workbox/
MIT License
12.28k stars 807 forks source link

'Got' dependency has security issue (dependabot) #3331

Open MyMediaMagnet opened 3 months ago

MyMediaMagnet commented 3 months ago

Library Affected: workbox-cli@7.1.0 (npm)

Browser & Platform: All

Issue or Feature Request Description: Dependabot is reporting the following alert for a dependency of workbox-cli:

'got' (npm) allows a redirect to a UNIX socket

This is the dependency tree for this package:

workbox-cli@7.1.0 update-notifier@4.1.3 latest-version@5.1.0 package-json@6.5.0 got@9.6.0

The earliest fixed version is got@11.8.5

tuuchen commented 2 months ago

Any patch for this?