Security vulnerability on prebuild-install dependency.

[DtheRock]

How frequently does the bug occur?

All the time

Description

Hi,

You need to consider using a later version of prebuild-install as the "^6.1.1" that you are currently using, has a "High Severity" dependency vulnerability that comes from the simple-get < 4.0.1 version.

Here is the respective CVE-2022-0355 GHSA-wpg7-2c88-r8xv

Stacktrace & log output

No response

Can you reproduce the bug?

Yes, always

Reproduction Steps

No response

Version

N/A

What SDK flavour are you using?

MongoDB Realm (i.e. Sync, auth, functions)

Are you using encryption?

Yes, using encryption

Platform OS and version(s)

N/A

Build environment

Which debugger for React Native: ..

Cocoapods version

N/A

[takameyer]

@DtheRock Thanks for the report. We will get this fixed right away.

[DtheRock]

Hi,

Thanks for your great support and the quick response. Can you push the security update to the Realm JavaScript v10.20.0-beta.1 version too?

Thanks