dotansimha / dotansimha/graphql-code-generator

Apollo Engine Loader Version

Open
#9,211 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
11.3k
Forks
1.4k
Avg merge
1d 1h
Merged PRs (30d)
23

Description

### Which packages are impacted by your issue?

@graphql-codegen/cli

### Describe the bug

ael version 7.3.6 has dependency chain whatwg-node/fetch@0.6.2 > undici@5.16.0 which contains a ReDos vulnerability

solution: update the package

### Your Example Website or App

n/a

### Steps to Reproduce the Bug or Issue

npm install

### Expected behavior

no security vulnerabilities should exist in dependencies

### Screenshots or Videos

_No response_

### Platform

- `@graphql-codegen/*` version(s): 3.2.2

### Codegen Config File

_No response_

### Additional context

_No response_

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.