Semver 6.3.0 Vulnerability

jaxxstorm / action-install-gh-release

GitHub Action to install the Github Release binaries

Apache License 2.0

67 stars 29 forks source link

Open schmidtw opened 3 weeks ago

schmidtw commented 3 weeks ago

Hello,

I'm working on some unrelated updates & noticed Semver 6.3.0 is used & has been marked vulnerable by synk: https://security.snyk.io/package/npm/semver/6.3.0