#3331 'Got' dependency has security issue (dependabot)

[Anonymous]

Originally created by: MyMediaMagnet

Library Affected:
workbox-cli@7.1.0 (npm)

Browser & Platform:
All

Issue or Feature Request Description:
Dependabot is reporting the following alert for a dependency of workbox-cli:

'got' (npm) allows a redirect to a UNIX socket

This is the dependency tree for this package:

workbox-cli@7.1.0
update-notifier@4.1.3
latest-version@5.1.0
package-json@6.5.0
got@9.6.0

The earliest fixed version is got@11.8.5

[Anonymous]

Originally posted by: tuuchen

Any patch for this?

[Anonymous]

Ticket changed by: westonruter

• status: open --> closed

[Anonymous]

Originally posted by: westonruter

Should be fixed now. I just merged https://github.com/GoogleChrome/workbox/pull/3393