fs-routes is using a vulnerable version of glob
andreainnocenti opened this issue · comments
Hi team! My service use openapi-framework which is based on fs-routes. The latest version of fs-routes has as dependcy an outdated version of glob (https://github.com/kogosoftwarellc/open-api/blob/v12.1.3/packages/fs-routes/package.json#L31). This version has a vulnerability that was fixed in glob v9+.
The vulnerability is https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116.
Is it possible to fix this vulnerability?
Thanks!
Any chance we can get this issue fixed? It should be enough merging the PR and publish a new release.