Describe the bug
Not really a bug, but a warning on npm audit when installing @sourceloop/cache.
send <0.19.0
send vulnerable to template injection that can lead to XSS - https://github.com/advisories/GHSA-m6fv-jmcg-4jfg
fix available via `npm audit fix --force`
Will install @sourceloop/cache@2.0.2, which is a breaking change
node_modules/swagger-stats/node_modules/send
swagger-stats >=0.95.8
Depends on vulnerable versions of send
node_modules/swagger-stats
@sourceloop/core *
Depends on vulnerable versions of swagger-stats
node_modules/@sourceloop/core
@sourceloop/cache >=2.1.0
Depends on vulnerable versions of @sourceloop/core
node_modules/@sourceloop/cache
I know it's a low severity vulnerability, and I know it depends on swagger-stats, but you may want to keep monitored that dep for then updating @sourceloop/core, and in turns @sourceloop/cache.