Open
Description
There is a dependent library nth-check in react-scripts which is vulnerable to CVE-2021-3803. The mend scan is reporting this vulnerability for our project.
-- react-scripts@5.0.1
+-- @svgr/webpack@5.5.0
| -- @svgr/plugin-svgo@5.5.0 |
-- svgo@1.3.2
| -- css-select@2.1.0 |
-- nth-check@1.0.2
nth-check beyond v2.0.1(including) is available and safe from this vulnerability.
To fix this we have upgraded to the latest version for react-scripts (as shown above) still this dependency is not upgraded. Can you please take some action and upgrade this transitive dependency inside the parent library react-scripts at the earliest possible.