Critical Vulnerability Due to Formidable <3.2.4

[domcorso-nib]

When using sumo-logger we are seeing a critical vulnerability on formidable <3.2.4 which is a dependency of superagent: https://github.com/advisories/GHSA-8cp3-66vr-3r4c

I've raised an issue with SuperAgent and they have updated to version 9 which now uses formidable@^3.5.1. This fixes the vulnerability report: https://github.com/ladjs/superagent/pull/1800

Is there any chance sumo-logger can be updated to use superagent@^9.0.1?

[tomstrong64]

Created a pull request for this :+1:

[kvaidy01]

We are also facing same issue....can this be looked on priority ?

[tomstrong64]

@bpolanczyk can you review the merge request?

[allicanseenow]

Any update on this?