One dependency @cypress/request looks like has no support (2 moderate vulnerabilities)

[LubosK]

@cypress/request have two vulnerabilities and it looks like theres no one who takes care about it. Is there some way how to solve the issues mentioned below? What should be the approach? Are those issues consider as a part of cypress or its a totally separate project? Thanks in advance for any resposne

More info: GHSA-72xf-g2v4-qvf3
Patch available
Opened issue: cypress-io/request#31
Opened PR: cypress-io/request#32
2.
More info: GHSA-p8p7-x288-28g6
No patch available
Opened issue: cypress-io/request#27
PR: cypress-io/request#30

[jordanpowell88]

We released version 2.88.12 today which patches this security vulnerability https://www.npmjs.com/package/@cypress/request/v/2.88.12

[LubosK]

Thank you, @jordanpowell88 !

[LubosK]

Hi @jordanpowell88 , I just checked new version, but it has solved only tough-cookie issue. The second one, is still the issue cypress-io/request#27