chore: add security exclusion for jspdf

[mohammadalfaiyazbitgo]

Ticket: WP-4055

TICKET: WP-4055

[andrew-scott-fischer]

From WP-4055

adding exclusion for https://github.com/advisories/GHSA-w532-jxjh-hjhjCan't find link , we don’t use jspdf in platform to generate PDFs. PDF generation is done on the client with the sdk.

If we don't use it, why not remove it as a dependency? Ignoring a CVE with an 8.7 score is not a great practice.

[mohammadalfaiyazbitgo]

From WP-4055

adding exclusion for https://github.com/advisories/GHSA-w532-jxjh-hjhjCan't find link , we don’t use jspdf in platform to generate PDFs. PDF generation is done on the client with the sdk.

If we don't use it, why not remove it as a dependency? Ignoring a CVE with an 8.7 score is not a great practice.

@andrew-scott-fischer The SDK uses it to generate Key cards, but it's on the client end.

[andrew-scott-fischer]

ok, but then you should update the dependency, even if it's a transitive one.