Currently openapi-generator-cli's package.json has the following minimum versions set for axios packages:
"@nestjs/axios": "^4.0.0",
"axios": "^1.8.4",
https://github.com/OpenAPITools/openapi-generator-cli/blob/9be75d760ce8bd2b1dec103dbf65132f898a6a44/package.json#L82C4-L87C23
However, form-data 4.0.3 has security vulnerabilities and is a child dependency of the axios package, which itself is a child dependency of nestjs/axios.
axios and nestjs/axios resolved these issues by upgrading their packages in the following recent releases:
Can the minimum versions for openapi-generator-cli be updated to the following versions to remove the security vulnerability?
"@nestjs/axios": "^4.0.1",
"axios": "^1.11.0",
Currently openapi-generator-cli's
package.jsonhas the following minimum versions set foraxiospackages:https://github.com/OpenAPITools/openapi-generator-cli/blob/9be75d760ce8bd2b1dec103dbf65132f898a6a44/package.json#L82C4-L87C23
However,
form-data 4.0.3has security vulnerabilities and is a child dependency of theaxiospackage, which itself is a child dependency ofnestjs/axios.axiosandnestjs/axiosresolved these issues by upgrading their packages in the following recent releases:axios v1.11.0: https://github.com/axios/axios/releases/tag/v1.11.0@nestjs/axiostakes theaxios 1.11.0package (https://github.com/nestjs/axios/blob/master/package.json)Can the minimum versions for
openapi-generator-clibe updated to the following versions to remove the security vulnerability?