OWASP Dependency scan results

[luidude]

minimatch v3.0.4 triggering this waring in our vulnerabiilty scans.

https://nvd.nist.gov/vuln/detail/CVE-2022-3517#:~:text=A%20vulnerability%20was%20found%20in,in%20a%20Denial%20of%20Service.

[levpachmanov]

Hey @luidude,
We're part of a startup called Seal Security that mitigates software vulnerabilities in older open source versions by backporting/creating standalone security patches - enabling more straightforward remediation in cases like this. We created an minimatch 3.0.4-sp1 that's vulnerability-free. As with all of our patches, it's open-source and available for free.

If relevant, check out our GitHub repo if you wish to learn more, or start using our app.

Please feel free to reach us at [email protected] if you have any requests/questions.