ladjs / superagent

Ajax for Node.js and browsers (JS HTTP client). Maintained for @forwardemail, @ladjs, @spamscanner, @breejs, @cabinjs, and @lassjs.
https://ladjs.github.io/superagent/
MIT License
16.57k stars 1.33k forks source link

fix: SNYK-JS-SEMVER-3247795 security vulnerability fix #1771

Closed Madhust closed 12 months ago

Madhust commented 12 months ago

This PR upgrades the semver package to the latest to resolve the synk vulnerability issue.

https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795

Checklist

titanism commented 12 months ago

This is not a vulnerability.

naile commented 3 months ago

@titanism I assume you mean it's not applicable in this library? Still, it would be great to update to avoid false positives when this library is used. Right now across all repos using this library this dependency is flagged by Snyk, Dependabot, Renovate and the likes. This then requires manual sign-off that it's not applicable.