defra / ffc-messaging Goto Github PK

Issue:

Snyx reported a high severity vulnerability on package fast-xml-parser version 4.0.12 (please see the attached screenshot),
The maintainers of fast-xml-parser patched this vulnerability about 8 days ago in version 4.1.2. we recommend updating fast-xml-parser to that version as soon as possible.

Issue Checklist:

[x] I have upgraded to the latest Release 2.6.4

Expected behaviour:

No vulnerabilities reported

Actual behaviour:

Snyx reports a HIGH severity alert for a dependency ([email protected]) used by pact.

Steps to reproduce:

1. Install ffc-messaging inside a project,
2. Install and run Snyk test npm i snyk, snyk test.