Update @hey-api/json-schema-ref-parser with js-yaml 4.3.1 to resolve CVE finding #4315
ctrlalttaco
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Hello, currently the
@hey-api/json-schema-ref-parserpackage referencesjs-yaml = '^4.1.1'which has an outstanding CVE (CVE-2026-59869). Updating the dependency to '^4.3.1' and updating the lockfile would resolve the issue.My current mitigation is to add an override to my package.json:
All reactions