Running trivy to search for CVEs, this is the output we have after installing react-native-qrcode-svg:
node_modules/react-native-qrcode-svg/Example/Gemfile.lock (bundler)
===================================================================
Total: 1 (HIGH: 1, CRITICAL: 0)
┌─────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────┤
│ rexml │ CVE-2024-49761 │ HIGH │ fixed │ 3.2.6 │ >= 3.3.9 │ rexml: REXML ReDoS vulnerability │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2024-49761 │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────┘
Would it be possible to fix?
Running trivy to search for CVEs, this is the output we have after installing
react-native-qrcode-svg:Would it be possible to fix?