Nested dependency form-data@2.3.3 has a critical vulnerability `GHSA-fjxv-7rqg-78g4`

[evgenylyuts]

Found using grype

NAME form-data
INSTALLED 2.3.3
FIXED IN 2.5.4
TYPE npm
VULNERABILITY GHSA-fjxv-7rqg-78g4
SEVERITY Critical
EPSS < 0.1% (17th)
RISK < 0.1

[qwilr-altonius]

This is from the request dependency, which was deprecated in 2019.
@mcohen01 are there any plans afoot to replace request with an alternative library?

[kgstew]

Checking on this as well. Are they any plans to continue development on this project and swap out request? It looks like there is a PR with and axios implementation. #248

@mcohen01 Do you need support in getting this pushed through?

[mcohen01]

thanks for the nudge. #248 merged. i'll publish to npm later tonight when i have access to my machine