webpack vulnerability 5.75.0 -> 5.76.0

[gilded temple]

I got this vulnerability https://github.com/advisories/GHSA-hc6q-2mpp-qw7j in my nestjs deployment. How to solve this?

[pearl thorn]

I'm waiting for this PR to get merged: https://github.com/nestjs/nest-cli/pull/1975

you could also use the overrides feature from NPM: https://docs.npmjs.com/cli/v8/configuring-npm/package-json/#overrides

[pastel fable]

Looks like the PR is closed.

[mighty rapids]

Merged fix: https://github.com/nestjs/nest-cli/issues/1976

[pastel fable]

Last comment refers to the same PR posted above and that's just closed

[pearl thorn]

https://github.com/nestjs/nest-cli/blob/45b207b0e5728de0b0885f6a218a4a09fc97f0c3/package.json#L61

[mighty rapids]

Ah, shoot you're correct. Saw the purple and assumed

[pearl thorn]

fixed

[pastel fable]

It's fixed in the latest version I suppose but not backported to 8.x?

[pearl thorn]

yeah
you could open a new issue requesting that back port

[pastel fable]

https://github.com/nestjs/nest-cli/issues/2050

[pastel fable]

@pearl thorn I tried to raise a PR but looks like we can't raise it against an older tag or branch? Can't find any information in the contribution guidelines either. Do you have any idea?

[pearl thorn]

don't worry
Kamil can do that easily 🙂