ember-cli / ember-fetch

HTML5 fetch polyfill from github wrapped and bundled for ember-cli users.
MIT License
175 stars 79 forks source link

Upgrade package "node-fetch" to fix #730

Open JgJun opened 1 year ago

JgJun commented 1 year ago

https://github.com/advisories/GHSA-r683-j2x4-v87g suggests to us 2.6.7 or above to fix vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Ember-fetch is on 2.6.1 https://github.com/ember-cli/ember-fetch/blob/master/package.json#L40

In order to fix the CVE the dependency should be upgraded.