5.3
CVSS V3
Status
Fixed version
8.2.1-r0Status
Impact
Several lerna v8.2.0 dependencies (including @lerna/legacy-package-management) rely on @octokit/rest@19.0.11, which itself relies on @octokit/plugin-paginate-rest version 6.1.2 as a direct dependency. The fix versions of this dependency are several major versions higher (v9.2.2 or v11.4.1) and will require upstream maintainers to implement.
Status