jstastny-cz opened a new pull request, #3088: URL: https://github.com/apache/incubator-kie-tools/pull/3088
cross-spawn vulnerability CVE-2024-21538 gets into our project through direct dependency cross-env. Cross-env unfortunately does not have more recent release that would use unaffected version of cross-spawn, it is in maintenance mode and considering the release history, no fix is on the way. Resorted to resolutions entry to force cross-spawn ^7.0.6 (which is most recent). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
