Description

when running bun audit, a vulnerability is found in the dependency js-yaml from @hey-api/openapi-ts › @hey-api/json-schema-ref-parser › js-yaml

js-yaml  <4.1.1
  eslint › @eslint/eslintrc › js-yaml
  @hey-api/openapi-ts › @hey-api/json-schema-ref-parser › js-yaml
  moderate: js-yaml has prototype pollution in merge (<<) - https://github.com/advisories/GHSA-mh29-5h37-fv8m

1 vulnerabilities (1 moderate)

info: GHSA-mh29-5h37-fv8m

Workaround:

override the depency to >=4.1.1 in package.json:

  "overrides": {
    "js-yaml": "^4.1.1"
  },

Reproducible example or configuration

not needed

OpenAPI specification (optional)

No response

System information (optional)

No response