mongo-rest-api (=0.1.0), pine-ql (>=0.1.0 <=0.5.4) potentially affected by CVE-2021-23760 via keyget (=1.0.1)

keyget NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api =0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2021-23760 Source advisory: OSV:GHSA-9FP7-4FJM-Q3MF...

CVE-2021-23760

creationtimestamp| type| source ---|---|--- 2022-01-29 00:22:20+00:00| seen| https://t.me/cibsecurity/36532...