NPM vulnerability #177

Open

Description

opened

Attached directly from npm audit output:

Low Denial of Service

Package node-fetch

Patched in >=2.6.1 <3.0.0-beta.1|| >= 3.0.0-beta.9

Dependency of react-d3-components

Path react-d3-components > create-react-class > fbjs > isomorphic-fetch > node-fetch

More info https://npmjs.com/advisories/1556

Unfortunate transitive dependency. Unlikely to be updated?

No one assigned

No labels

No projects

No milestone

None yet

No branches or pull requests