Getting Dependabot Alert

[manoj27730]

What happened?

Hi Team,

I am trying to add the actions "https://github.com/actions/upload-artifact" with version v4.3.3 in our Enterprise GitHub repository.

While adding the GitHub Team found, there were 3 vulnerabilities found in the action that you requested for by Dependabot:

The team is unable to import this action for usage in because of the vulnerabilities found in the dependencies used by this action that might pose a security threat.

I have attached the screenshot of the vulnerabilities.

What did you expect to happen?

Fix the Dependabot Alerts

How can we reproduce it?

It's our internal repo.

Anything else we need to know?

No response

What version of the action are you using?

v4.3.3

What are your runner environments?

window

Are you on GitHub Enterprise Server? If so, what version?

No response

[manoj27730]

Hi Team,

Any update on the above issue?

Thanks,
Manoj Kumar Sahu

[manoj27730]

Hi Team,

Any update on the above issue?

Thanks,
Manoj Kumar Sahu

[trevor-moore-dev]

I'm experiencing the same issue, can't clone due to dependabot vulnerabilities.