This repository was archived by the owner on Sep 8, 2026. It is now read-only.

This repository was archived by the owner on Sep 8, 2026. It is now read-only.

Vulnerability in decompress/4.2.0 #46

Open

opened

on Jun 25, 2020

ember-cli-pact has nested dependency decompress/4.2.0 with a security vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2020-12265. This is from a direct dependency on pact-node^8.4.0. The newest version of pact-node does not have this vulnerability. Would it be possible to update the dependency to a version of pact-node that removes the vulnerability?

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests