microsoft / accessibility-insights-action

Github Action to scan for accessibility issues in github pages
MIT License
80 stars 42 forks source link

chore: Added resolutions in package.json file to resolve CVE-2024-29415 issue #2124

Closed v-sharmachir closed 2 months ago

v-sharmachir commented 2 months ago

Details

ip's latest version is vulnerable and unmaintained. Our repo don't use it directly but it ships as dependency from other packages like jest, etc and these packages already shifted from ip to ip-address package because of vulnerability and it is not maintained. This PR will remove the unwanted dependencies and ip reference from our code base and also resolve CVE-2024-29415 issue.

Motivation

CVE-2024-29415

Context

Pull request checklist