search

avh4 / binwrap

Distribute binaries via npm
39 stars 17 forks source link

Critical severity vulnerability - json-schema #65

Open sporto opened 1 year ago

sporto commented 1 year ago

This package depends on request 2.88.0 https://github.com/avh4/binwrap/blob/main/package.json#L42

Which depends on form-data 2.3.3 https://github.com/request/request/blob/master/package.json#L36

Which depends on json-schema 0.2.3

json-schema 0.2.3 has a critical vulnerability: https://github.com/advisories/GHSA-896r-f27r-55mw

It would be great if this dependecy could be changed.

sporto commented 1 year ago

Related https://github.com/avh4/binwrap/issues/25