Sub-dependency fails vulnerability check

[canva-soft]

Hi,

we use Lottie in our App.
Since this morning our Pipeline fails its vulnerability check due to archive3.4.10 which is a sub-dependency of Lottie.

We checked and no other dependency in our app is using archive, so the root is Lottie.
Is this a known issue and are you in exchange with the archive devs for that?

I opened an issue in the archive GitHub as well.

Thank you!

[moninm]

I added in the pubspec file the last version for archive and it is working fine now on my side.

archive: ^3.6.1

Hope it will help