From 22034a17b3b9f9999691dc87869169f6ff0fb0df Mon Sep 17 00:00:00 2001 From: Martin Cermak Date: Thu, 27 Jan 2022 15:24:01 +0100 Subject: [PATCH] [Security] CVE-2022-0235 update node-fetch@2.6.7 https://github.com/advisories/GHSA-r683-j2x4-v87g https://github.com/node-fetch/node-fetch/pull/1453 https://nvd.nist.gov/vuln/detail/CVE-2022-0235 --- packages/runtime/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/runtime/package.json b/packages/runtime/package.json index 80ecc9ad2..011c77424 100644 --- a/packages/runtime/package.json +++ b/packages/runtime/package.json @@ -26,7 +26,7 @@ "@stoplight/types": "^12.3.0", "abort-controller": "^3.0.0", "lodash": "^4.17.21", - "node-fetch": "^2.6.1", + "node-fetch": "^2.6.7", "tslib": "^2.3.1" } }