We are observing following dependency vuln via dependabot. This is a critical vuln
Dependabot cannot update parse-url to a non-vulnerable version
The latest possible version that can be installed is 6.0.5 because of the following conflicting dependencies:
nestjs-temporal@1.0.0 requires parse-url@^6.0.0 via a transitive dependency on git-up@4.0.5
No patched version available for parse-url
The earliest fixed version is 8.1.0.
We are observing following dependency vuln via dependabot. This is a critical vuln