Bug: https://ossindex.sonatype.org/vuln/d96c07dd-81f9-41f6-b2bd-531143bcaeab

[dallinskinner]

Vulnerability URL
https://ossindex.sonatype.org/vuln/d96c07dd-81f9-41f6-b2bd-531143bcaeab

Description
The vulnerability is flagging quill 1.3.7 for a problem that existed in 1.3.6 and was fixed in 1.3.7. The linked npm advisory says versions prior to 1.3.7 are affected. There are also links to both the issue and the resultant PR which you can see was merged and released.

[ken-duck]

This has been fixed in our research DB, and should be public by tomorrow. Thanks for the heads up! I also removed a duplicate finding of the same vulnerability at the same time.

[ken-duck]

Cleaning things up: it looks like the data is correct now: https://ossindex.sonatype.org/vuln/d96c07dd-81f9-41f6-b2bd-531143bcaeab