There is a dependent library nth-check in react-scripts which is vulnerable to CVE-2021-3803. The mend scan is reporting this vulnerability for our project.
-- react-scripts@5.0.1
+-- @svgr/webpack@5.5.0
| -- @svgr/plugin-svgo@5.5.0 | -- svgo@1.3.2
| -- css-select@2.1.0 | -- nth-check@1.0.2
nth-check beyond v2.0.1(including) is available and safe from this vulnerability.
To fix this we have upgraded to the latest version for react-scripts (as shown above) still this dependency is not upgraded. Can you please take some action and upgrade this transitive dependency inside the parent library react-scripts at the earliest possible.
There is a dependent library nth-check in react-scripts which is vulnerable to CVE-2021-3803. The mend scan is reporting this vulnerability for our project.
-- react-scripts@5.0.1
+-- @svgr/webpack@5.5.0
|
-- @svgr/plugin-svgo@5.5.0 |-- svgo@1.3.2|
-- css-select@2.1.0 |-- nth-check@1.0.2nth-check beyond v2.0.1(including) is available and safe from this vulnerability.
To fix this we have upgraded to the latest version for react-scripts (as shown above) still this dependency is not upgraded. Can you please take some action and upgrade this transitive dependency inside the parent library react-scripts at the earliest possible.