[Security] ws package vulnerability through puppeteer@14

asyncapi / html-template

HTML template for AsyncAPI Generator. Use it to generate a static docs. It is using AsyncAPI React component under the hood.

63 stars 56 forks source link

[Security] ws package vulnerability through puppeteer@14 #665

Open anfern777 opened 1 month ago

anfern777 commented 1 month ago

Description "ws@8.7.0" package has known vulnerabilities and is present in dependency tree through puppeter:^14.1.0

Details The ws package, has known vulnerabilities, is being included as a transitive dependency: https://github.com/advisories/GHSA-3h5v-q93c-6h6q Below is the detailed dependency chain:

html-template@2.3.10
├── puppeteer@ ^14.1.0
    └── ws: 8.6.0

github-actions[bot] commented 1 month ago

Welcome to AsyncAPI. Thanks a lot for reporting your first issue. Please check out our contributors guide and the instructions about a basic recommended setup useful for opening a pull request.
Keep in mind there are also other channels you can use to interact with AsyncAPI community. For more details check out this issue.

derberg commented 3 weeks ago

affects only users that use pdf generation flag