Moderate Vulnerability Flag on Github Repository...package.json

[akinhwan]

This is my first time seeing this and pushing to github with this package, but is anyone aware of this vulnerability?

http://prntscr.com/ip9qfy

Above is a screenshot of the alert I received after pushing my entire repo to github, including package.json

[harryho]

+1

[trygve-lie]

We've got the same in a module depending on this module. See: https://nvd.nist.gov/vuln/detail/CVE-2018-7651

[iarna]

As the advisory says, you need to update to ssri@5.2.2 or later. There's no action to be taken here.

[akinhwan]

@iarna thanks, everyone as well!