Description
@wiremock/wiremock-testcontainers-node is using an old version of testcontainers that depends on a vulnerable version of undici, which was fixed some time ago
Logs
Extracted from npm audit:
undici <6.23.0
Severity: moderate
Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion - https://github.com/advisories/GHSA-g9mf-h72j-4rw9
fix available via `npm audit fix`
node_modules/@wiremock/wiremock-testcontainers-node/node_modules/undici
testcontainers 10.11.0 - 10.28.0
Depends on vulnerable versions of undici
node_modules/@wiremock/wiremock-testcontainers-node/node_modules/testcontainers
References