Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Vulnerabilitites in JS-packages: 2 critical, 21 high #42

Open
rrramble opened this issue Oct 25, 2024 · 1 comment
Open

Vulnerabilitites in JS-packages: 2 critical, 21 high #42

rrramble opened this issue Oct 25, 2024 · 1 comment

Comments

@rrramble
Copy link

NPM install command shows some vulnerabilities in the package base:

  • 2 critical
  • 21 high
  • 19 moderate
  • 1 low

Suggested solution from the NPM itself:

To address issues that do not require attention, run: npm audit fix

This solution locally showed the following results:

  • 0 critical
  • 12 high
  • 14 moderate
  • 0 low

However, it brings several dozens of changes through the entire package.json file. That is why I would not risk making a Pull request by myself.

@Mihonarium
Copy link
Owner

There are currently no Dependabot alerts on the repo; I assume most of these vulnerabilities are on the server side and don't affect static websites.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants