Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CAN'T FIX FOUNDED VULNERABILITIES !!!! #8

Open
fkazadi2 opened this issue May 15, 2020 · 4 comments
Open

CAN'T FIX FOUNDED VULNERABILITIES !!!! #8

fkazadi2 opened this issue May 15, 2020 · 4 comments

Comments

@fkazadi2
Copy link

  • lite-server@2.5.4
    added 20 packages from 3 contributors, removed 68 packages, updated 23 packages and audited 340 packages in 220.833s

1 package is looking for funding
run npm fund for details

found 4 vulnerabilities (3 low, 1 high)
run npm audit fix to fix them, or npm audit for details

@lowwk1234
Copy link

  1. get the same problem. Try npm audit fix - the issue remains. Pls advise if this will cause problem down the road. Thx

@saj120
Copy link

saj120 commented Jul 15, 2020

I am experiencing the same problem. Pls let me know when rectified.

@00cm
Copy link

00cm commented Sep 5, 2020

  1. get the same problem. Try npm audit fix - the issue remains. Pls advise if this will cause problem down the road. Thx

I think this will be okay for learning purposes. Just don't go live with anything that you create here. For me, I ran npm audit fix and it fixed all 100+ vulnerabilities except one. But now I know which package I am going to avoid when I build my own websites. :)

@Tonydarkness
Copy link

I don't know if anyone still experiences this, but the async package is outdated and has high severity vulnerability, so it's better to uninstall the vulnerable packages by using npm uninstall <package-name> including async, browser-sync, port-scanner, and lite-server. Then, use npm install async to install the latest version. If you wanna preview the HTML files, use the live preview extension from Visual Studio Code instead.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants