nested dependency es5-ext has a security vulnerability (low) and needs update

sequelize / cli

The Sequelize CLI

MIT License

2.53k stars 527 forks source link

nested dependency es5-ext has a security vulnerability (low) and needs update #1474

Open fredericpellin opened 7 months ago

fredericpellin commented 7 months ago

es5-ext has vulnerability CVE-2024-27088

update has been done on es5-ext

Is it possible to update sequelize to use 0.10.63 of es5-ext ?

WikiRik commented 7 months ago

As far as I can see on the lockfile of our latest release (6.6.2), our dependencies do not have es5-ext pinned so if you refresh your lockfile it should be able to update to 0.10.63 already.