Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG]: v4.2.2 Has Security Vulnerabilities #375

Open
secondmanveran opened this issue Aug 7, 2023 · 0 comments
Open

[BUG]: v4.2.2 Has Security Vulnerabilities #375

secondmanveran opened this issue Aug 7, 2023 · 0 comments
Labels
bug Issues that represent a bug.

Comments

@secondmanveran
Copy link

  • What is the expected and current behavior?
    Inkline dependencies should install without vulnerabilities.

  • Steps to reproduce
    Clone repository, run npm install

  • Please tell us about your environment:

    • v4.2.2
    • macOS 13.14.1

got package has vulnerabilities:

got  <11.8.5
Severity: moderate
Got allows a redirect to a UNIX socket - https://github.com/advisories/GHSA-pfrx-2q88-qq97
fix available via `npm audit fix --force`
Will install np@8.0.4, which is a breaking change
node_modules/got
node_modules/package-json/node_modules/got
  npm-name  <=6.0.1
  Depends on vulnerable versions of got
  node_modules/npm-name
    np  2.2.0 - 7.7.0
    Depends on vulnerable versions of npm-name
    Depends on vulnerable versions of update-notifier
    node_modules/np
  package-json  <=6.5.0
  Depends on vulnerable versions of got
  node_modules/package-json
    latest-version  0.2.0 - 5.1.0
    Depends on vulnerable versions of package-json
    node_modules/latest-version
      update-notifier  0.2.0 - 5.1.0
      Depends on vulnerable versions of latest-version
      node_modules/update-notifier

6 moderate severity vulnerabilities
@secondmanveran secondmanveran added the bug Issues that represent a bug. label Aug 7, 2023
@secondmanveran secondmanveran changed the title v4.2.2 Has Security Vulnerabilities [BUG]: v4.2.2 Has Security Vulnerabilities Aug 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Issues that represent a bug.
Projects
None yet
Development

No branches or pull requests

1 participant