Skip to content

Lite-server dependecies are vulnerable (The Async package have a vulnerability) #207

@DavidUpegui

Description

@DavidUpegui

Lite-server dependecies are vulnerable (The Async package have a vulnerability)

When I install lite-server with de command npm install Lite-server appear that there are 4 high vulnerabilities.

First of all, I'm new with this technology so I can be wrong or something like that. By the way, the 4 High vulnerabilities come from a
vulnerable version of the Async package (This vulnerability was fixed in the cersion 2.6.4 and lite-server install the version 1.5.x). I actually don't know how to update Async (since is a nested dependency) but I think that is possible to change the predetermined version for installing and save money for the people who install lite-server (well, I don't know if it's possible but I think that it is).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions