package is pulling in a vulnerable version of fast-redact #7741
Description
GHSA-ffrw-9mx8-89p8 impacts all versions of fast-redact, which netlify-cli pulls in via fastify > pino:
└─┬ [email protected]
└─┬ [email protected]
└─┬ [email protected]
└── [email protected]
This has been addressed in pino v9.12.0 which replaces fast-redact with slow-redact, but while this version is allowed by fastify v4.29.1, the npm-shrinkwrap.json that netlify-cli ships with does not.