ember-fetch icon indicating copy to clipboard operation
ember-fetch copied to clipboard

Upgrade package "node-fetch" to fix

Open JgJun opened this issue 3 years ago • 0 comments

https://github.com/advisories/GHSA-r683-j2x4-v87g suggests to us 2.6.7 or above to fix vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Ember-fetch is on 2.6.1 https://github.com/ember-cli/ember-fetch/blob/master/package.json#L40

In order to fix the CVE the dependency should be upgraded.

JgJun avatar Dec 08 '22 14:12 JgJun