-
-
Notifications
You must be signed in to change notification settings - Fork 400
Closed
Description
Clear and concise description of the problem
- Body: This is where you'll provide all the details. Copy and paste the following template, filling in any relevant information about your environment:
Description:
Suggested solution
I'm encountering a persistent security vulnerability related to the esbuild package (specifically versions <=0.24.2) in my project when using @module-federation/nextjs-mf. After running npm audit, I'm consistently presented with a moderate severity warning related to the following vulnerability:
- Vulnerability: esbuild enables any website to send any requests to the development server and read the response
Alternative
- Advisory Link: GHSA-67mh-4wv8-2f99
Dependency Chain:
Additional context
Through npm ls esbuild, I've identified the dependency chain that's introducing the vulnerable version:
Validations
- Read the Contributing Guidelines.
- Check that there isn't already an issue that request the same feature to avoid creating a duplicate.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels