Fix for security issues in Synk

[nandeshwarshubh]

Hi,

The following issue was reported in Snyk for i18next-http-backend. Is there a roadmap to update the following dependency to fix the issue?

Snyk i18next-http-backend issues

Regular Expression Denial of Service (ReDoS) - i18next-http-backend@1.4.1 › cross-fetch@3.1.5 › node-fetch@2.6.7

[adrai]

This needs first to be addressed in cross-fetch (@lquixada) and probably also wait for the fixed v2 release in node-fetch (@westy92)

[westy92]

I emailed Snyk last night about this issue. As far as I can tell, it was introduced in node-fetch 3.1.0 and doesn't affect 2.x.

[adrai]

I emailed Snyk last night about this issue. As far as I can tell, it was introduced in node-fetch 3.1.0 and doesn't affect 2.x.

if it's the case, this is not an issue for i18next-http-backend