CVE in js-yaml library, Need Quick upgrade here.

[ursnj]

Hello Split IO team, We are an enterprise customer using your service, we can see split io is using older version of js-yaml (3.13.1) which has a CVE, force resolving js-yaml to latest version is breaking split IO functionality, Need help here ASAP. Thanks.

[EmilianoSanchez]

Hi @ursnj ,
We are going to make a patch release with the update.
Will let you know ASAP.

[EmilianoSanchez]

@ursnj,
We’ve released v11.10.1 of @splitsoftware/splitio with the updated dependency.
I’m closing the issue for now, but please reopen it if needed.

[ursnj]

Thanks for the quick help @EmilianoSanchez