Vulnerability from esm-seedrandom

[emerikool]

Version of reablocks dependency is not the latest and pull a version of esm-seedrandom which have vulnerabilities (3.0.5)

esm-seedrandom@3.0.5
node_modules/esm-seedrandom
esm-seedrandom@"^3.0.5" from @marko19907/string-to-color@1.0.0
node_modules/@marko19907/string-to-color
@marko19907/string-to-color@"^1.0.0" from reablocks@8.7.14
node_modules/reablocks
reablocks@"^8.7.6" from reaflow@5.3.4
node_modules/reaflow
reaflow@"~5.3.4"

[SerhiiTsybulskyi]

@emerikool, What vulnerability are you talking about?
I don't see any vulnerability for that package https://security.snyk.io/package/npm/esm-seedrandom/3.0.5-1

[emerikool]

@SerhiiTsybulskyi, yes in fact it's not a direct vulnerability, due to this issue
https://github.com/shanewholloway/js-esm-seedrandom/issues/10
esm-seedrandom@3.0.5 embeds node_modules folder which have vulnerabilities
https://github.com/shanewholloway/js-esm-seedrandom/issues/9