Skip to content

CVE-2022-37601 and CVE-2021-44906Β #3339

Open
@jkacmaz93

Description

@jkacmaz93

Hi, vulnerability scanner detected two dependencies in the yarn.lock file as vulnerable version referenced.

Minimist:
CVE-2021-44906 - The vulnerability can be remediated by updating the library to version 1.2.6 or higher.
See:

minimist@^1.2.0, minimist@^1.2.5:

Loader-Utils:
CVE-2022-37601 - The vulnerability can be remediated by updating the library to version 2.0.3 or higher.
See :

loader-utils@^2.0.0:

See:
loader-utils@^1.1.0, loader-utils@^1.2.3, loader-utils@^1.4.0:

Ruby version: 3.2.0
Webpacker version: 5.4.3

Desired behavior: Could you update these two dependencies to the non-vulnerable versions? Thank you.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions