Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Issue with request 2.88 in @looker/sdk and @looker/sdk-rtl #1439

Open
RobinShift4 opened this issue Mar 5, 2024 · 1 comment
Open
Labels

Comments

@RobinShift4
Copy link

I have a project using @looker/sdk as a dependency and when I run:

yarn run audit

I get

Severity: MODERATE Modules: @looker/sdk-rtl>request, @looker/filter-components>@looker/sdk-rtl>request, @looker/filter-components>@looker/sdk>@looker/sdk-rtl>request, @looker/filter-components>@looker/filter-expressions>@looker/sdk>@looker/sdk-rtl>request URL: https://github.com/advisories/GHSA-p8p7-x288-28g6

four times. I see that @looker/sdk and @looker/sdk-rtl are using

request "^2.88.0"

which has this security issue. Are there plans to upgrade?

@github-actions github-actions bot added need triage p3 Priority 3 labels Mar 5, 2024
@mnahkies
Copy link

request has been deprecated for years at this point - it really needs replacing IMO request/request#3142

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants