Repository navigation
update set-value to a non-vulnerable version #121
Description
Can a new version be released in order to address this security vulnerability?
Dependabot cannot update set-value to a non-vulnerable version
The latest possible version that can be installed is 2.0.1 because of the following conflicting dependencies:
@codedoc/core@0.2.24 requires set-value@^2.0.0 via a transitive dependency on cache-base@1.0.1
@codedoc/core@0.2.24 requires set-value@^2.0.1 via a transitive dependency on union-value@1.0.1
The earliest fixed version is 4.0.1.
Activity