Can pac-resolver dependecy be upgraded?

Question

Can pac-resolver dependecy be upgraded?

venuziano opened this issue 2 years ago · comments

Rafael Rodrigues commented 2 years ago

There is a high vulnerability on pac-resolver 4.1.0. See here: https://snyk.io/vuln/npm%3Apac-resolver

Could this package be upgraded to 5.0.0?

rick-aguayo · Answer 1 · Wed Oct 12 2022 04:13:40 GMT+0800 (China Standard Time)

https://thehackernews.com/2022/10/researchers-detail-critical-rce-flaw.html

Nathan Rajlich · Answer 2 · Fri May 05 2023 09:01:10 GMT+0800 (China Standard Time)

This code in this repository has been moved to the proxy-agents monorepo, so I am closing this pull request. If you feel that this issue still exists as of the latest release, feel free to open a new issue over there.