node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

[tsongas]

GitHub's Dependabot is showing a high severity security warning caused by the following packages:

@graphql-codegen/[email protected] requires [email protected] via a transitive dependency on [email protected]
@graphql-codegen/[email protected] requires [email protected] via a transitive dependency on [email protected]
@graphql-codegen/[email protected] requires [email protected] via a transitive dependency on [email protected]

Is this something that can get fixed?