archiver is using async with vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2021-43138
envgap__archiverjs__node-archiver-583
01 / FAILURE SIGNATURE
As reported upstream
No identifying execution failure has been captured.
Not a benchmark task.
- The project already builds and runs before the fix, so there is nothing to repair.
02 / ENVIRONMENT RECIPE
- Base commit
9af81df7d2165a5691eeda130ff14e49c43c79c3- Manifest
package.json- Reproduce
Awaiting issue-specific recipe- Run under trace
Awaiting a meaningful runtime command
03 / ORIGINAL ISSUE TEXT
archiverjs/node-archiver #583 · read the original issue
Please release new version of archiver to get the latest version of async
04 / LABELS
Labels from the report text only; not yet run
No supported category has been assigned.
Label rules and the text that matched
[]