dotansimha / dotansimha/graphql-code-generator
Apollo Engine Loader Version
- Dominant language
- TypeScript
- Stars
- 11.3k
- Forks
- 1.4k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 23
Description
### Which packages are impacted by your issue?
@graphql-codegen/cli
### Describe the bug
ael version 7.3.6 has dependency chain whatwg-node/fetch@0.6.2 > undici@5.16.0 which contains a ReDos vulnerability
solution: update the package
### Your Example Website or App
n/a
### Steps to Reproduce the Bug or Issue
npm install
### Expected behavior
no security vulnerabilities should exist in dependencies
### Screenshots or Videos
_No response_
### Platform
- `@graphql-codegen/*` version(s): 3.2.2
### Codegen Config File
_No response_
### Additional context
_No response_
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.