Getting vulnerability in Angular project , which is comming from esbuild package

I am using Angular 16 in my project and getting vulnerability realated to Go which is comming from esbuild package.



Go is not being used directly in project but esbuild internally uses go which is causing this vulnerability.

I tried overriding @angular-devkit/build-angular to use higher esbuild version but its not working

"overrides": {
"@angular-devkit/build-angular": {
"esbuild": "0.19.5",
}


Currently this version of esbuild is being used in project

└─┬ @angular-devkit/build-angular@16.2.15 overridden
├── esbuild@0.18.17
└─┬ vite@4.5.3
└── esbuild@0.18.17 deduped

Continue reading...