Today, @microsoft/rush-lib depends on version "~4.1.0" of js-yaml: https://github.com/microsoft/rushstack/blob/main/libraries/rush-lib/package.json#L71C16-L71C24 This version has a security issue: https://github.com/advisories/GHSA-h67p-54hq-rp68 @microsoft/rush-lib needs to be updated to use 4.2.x instead.
Today, @microsoft/rush-lib depends on version "~4.1.0" of js-yaml:
https://github.com/microsoft/rushstack/blob/main/libraries/rush-lib/package.json#L71C16-L71C24
This version has a security issue: GHSA-h67p-54hq-rp68
@microsoft/rush-lib needs to be updated to use 4.2.x instead.