Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bumping "ip" dev dependency to latest (prevent false-positives from vulnerability scanners) #1671

Closed
ethanae opened this issue Mar 26, 2024 · 1 comment

Comments

@ethanae
Copy link

ethanae commented Mar 26, 2024

Is your feature request related to a problem? Please describe.
A security vulnerability for the"ip" development dependency: https://nvd.nist.gov/vuln/detail/CVE-2023-42282

Despite being "ip" listed and used only as a development dependency some image scanners, like AWS Inspector, incorrectly report images as vulnerable - not ideal but not terrible as the images are not actually at risk of this vulnerability.

Describe the solution you'd like
Bumping "ip" to its latest version, 2.0.1

Thanks.

Additional context
Non-breaking change

@ethanae
Copy link
Author

ethanae commented Mar 27, 2024

There's already a PR for this.

#1670

@ethanae ethanae closed this as completed Mar 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant