Need help in fixing the Security Vulnerability when we use node-vibrant latest version (3.2.1-alpha & 3.1.6)

[lo50g3usuresh]

Hi,

We have one high security vulnerability issue when using the node-vibrant package. We tried latest version 3.2.1-alpha and 3.1.6.

Issue: file-type Denial of Service (DoS)
Introduced through
[email protected]
Fixed in
[email protected], @17.1.3.

Any timely help is highly appreciated.

Thanks,
Suresh

[lo50g3usuresh]

Please let me know if there are any progress on this.

[linkb15]

Found one on this library through Snyk as well with the library of xml2js regarding Prototype pollution

https://snyk.io/vuln/SNYK-JS-XML2JS-5414874

recommendation is to upgrade to higher version.

I am installing uniswap widget and it was raised in this issue following this path

@uniswap/[email protected] › [email protected] › @vibrant/[email protected] › @jimp/[email protected] › @jimp/[email protected] › [email protected] › [email protected] › [email protected]