Inflight vulnerability

[satinder1624]

Hi,

I am getting a security concern warning from @babel/cli@7.24.1 > glob@7.2.3 > inflight@1.0.6

What I can do?

Thanks,

[nicolo-ribaudo]

The vulnerability only happens when inflight is directly called by an attacker. The way Babel uses Glob, and Glob uses inflight is not affected by the vulnerability, and you can safely ignore it.

[satinder1624]

We are using a vulnerability portal and there it shows that as a vulnerability and my task is to take out that vulnerability. So any guidance much appreciate it

[nicolo-ribaudo]

The vulnerability doesn't affect you though -- you should mark it as such in the portal.

[satinder1624]

I cannot mark it, that’s the problem. If it is exists it shows on the portal. Get Outlook for iOS<https://aka.ms/o0ukef>

…

________________________________ From: Nicolò Ribaudo ***@***.***> Sent: Wednesday, April 24, 2024 12:52:45 PM To: babel/babel ***@***.***> Cc: Satinder Singh ***@***.***>; Author ***@***.***> Subject: Re: [babel/babel] Inflight vulnerability (Discussion #16444) The vulnerability doesn't affect you though -- you should mark it as such in the portal. — Reply to this email directly, view it on GitHub<#16444 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ARQXZFGHPA4SUAXNEKXTU3LY67PN3AVCNFSM6AAAAABGXHLGNWVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TEMJWGEYTC>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[nicolo-ribaudo]

What portal are you using? If it's Sync, you can configure it to mark a vulnerability as not applicable: https://docs.snyk.io/manage-risk/prioritize-your-issues/ignore-issues#decisions-to-ignore-issues, https://docs.snyk.io/manage-risk/prioritize-your-issues/ignore-issues#use-the-.snyk-file-to-ignore-issues