Open Tarmslitaren opened 11 months ago
This package is dependent on image 4.0.17
which is dependent on archive 3.3.7
which is vulnerable. Updating image package will fix the issue.
Adding this will solve the issue
dependency_overrides:
archive: ^3.3.8
:information_source: Info
Version:
0.13.1
:speech_balloon: Description
<Github dependabot warns of exploit in Archive v 3.3.7, please update the dependency to 3.3.8>