High vulnerability in 'braces' dependency

[apptio-mrejdych]

Hey Team
Snyk found high vulnerability in your package connected to 'braces' dependency

https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727
https://www.cve.org/CVERecord?id=CVE-2024-4068

Is there any chance to fix it?

[iiroj]

We don't use braces directly but through micromatch. Can you report the vulnerability there so that we can fix it once micromatch is updated?

[apptio-mrejdych]

Sure. Thank you

[BellaMay95]

Hello all -- looks like micromatch version 4.0.6 fixes this issue, the lint-staged library can now be updated with this new version of micromatch to fix the vulnerability.