Koajs vulnerable to Cross-Site Scripting - @angular-architects/module-federation: "^19.0.3

[MarcelBariakGrenzebach]

For which library do you need help?

module-federation

Question

Angular 19/ @angular-architects/module-federation": "^19.0.3

Hello, this issue was mentioned here once before (#852), but it was closed relatively soon, in my opinion.

The issue with the Koa:

Is it possible to update the right dependencies in the @angular-architects/module-federation@19 to solve these vulnerabilities?

I tried to fix the vulnerability using @angular-architects/module-federation@20 / ngx-build-plus@19 in Angular 19 project, which doesn't work.

[Blackbaud-SteveBrush]

We're also seeing this vulnerability warning with @angular-architects/module-federation@20. We can't update until this is resolved because our pipelines have strict vulnerability compliance.