Skip to content

Update devDependencies and gems. - #27981

Merged
XhmikosR merged 1 commit into
v4-devfrom
v4-dev-xmr-deps
Jan 7, 2019
Merged

XhmikosR merged 1 commit into
v4-devfrom
v4-dev-xmr-deps

Conversation

@XhmikosR

@XhmikosR XhmikosR commented Jan 5, 2019

Copy link
Copy Markdown
Member

No description provided.

@XhmikosR
XhmikosR requested a review from Johann-S January 5, 2019 10:06
@XhmikosR
XhmikosR force-pushed the v4-dev-xmr-deps branch 3 times, most recently from 57cf650 to 2278c56 Compare January 6, 2019 15:31
@XhmikosR

XhmikosR commented Jan 7, 2019

Copy link
Copy Markdown
Member Author

Finally down to 3 vulnerabilities, which unfortunately, I doubt they will be fixed anytime soon.

C:\Users\xmr\Desktop\bootstrap>npm audit

                       === npm audit security report ===


                                 Manual Review
             Some vulnerabilities require your attention to resolve

          Visit https://go.npm.me/audit-guide for additional guidance


  High            Regular Expression Denial of Service

  Package         string

  Patched in      No patch available

  Dependency of   broken-link-checker [dev]

  Path            broken-link-checker > bhttp > string

  More info       https://nodesecurity.io/advisories/536


  Low             Prototype Pollution

  Package         lodash

  Patched in      >=4.17.5

  Dependency of   broken-link-checker [dev]

  Path            broken-link-checker > bhttp > form-data2 > lodash

  More info       https://nodesecurity.io/advisories/577


  Low             Prototype Pollution

  Package         lodash

  Patched in      >=4.17.5

  Dependency of   broken-link-checker [dev]

  Path            broken-link-checker > bhttp > lodash

  More info       https://nodesecurity.io/advisories/577

found 3 vulnerabilities (2 low, 1 high) in 15736 scanned packages
  3 vulnerabilities require manual review. See the full report for details.

@XhmikosR
XhmikosR merged commit cdece35 into v4-dev Jan 7, 2019
@XhmikosR
XhmikosR deleted the v4-dev-xmr-deps branch January 7, 2019 16:57
@mdo mdo mentioned this pull request Jan 7, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants