Dependabot issued a critical alert on the vm2 library which is used by proxy-agent. A new version of proxy-agent removes this vulnerability by replacing vm2. Spectral needs to be updated to use this new version.
Links to the two Dependabot alerts that relate to this issue:
Dependabot issued a critical alert on the vm2 library which is used by proxy-agent. A new version of proxy-agent removes this vulnerability by replacing vm2. Spectral needs to be updated to use this new version.
Links to the two Dependabot alerts that relate to this issue:
265 266
Link to the new proxy-agent version to be used: proxy-agent 406.3.0
NOTE: This update must also be done for prism and platform-internal. See the links to the other issues in the comments.