search

krakenjs / confit

Environment-aware configuration.
Other
61 stars 26 forks source link

NPM High vulnerability on async dependency #85

Closed alanperezg-iweb closed 7 months ago

alanperezg-iweb commented 2 years ago

Detailed Description

npm audit report reported a High vulnerability on the async dependency used in the confit dependency

Screen Shot 2022-05-04 at 11 30 22

Possible Implementation

For versions 0.x.x, 1.x.x and 2.x.x use an async version >= 2.6.4 for 3.x.x versions use >= 3.2.2 More details can be found here: https://github.com/advisories/GHSA-fwr7-v2mv-hh25

Environment Details