The version of @chromaui/localtunnel currently used by this package contains an axios vulnerability, it has been patched, but needs to be used and published.
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Denial of Service │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.18.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ storybook-chromatic [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ storybook-chromatic > @chromaui/localtunnel > axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/880 │
└───────────────┴──────────────────────────────────────────────────────────────┘
ndelangen
commented
5 years ago
The version of
@chromaui/localtunnelcurrently used by this package contains an axios vulnerability, it has been patched, but needs to be used and published.