Skip to content

Fix npm vulnerability#175

Merged
fbricon merged 1 commit intoredhat-developer:masterfrom
xorye:fix_vulnerability
Dec 17, 2019
Merged

Fix npm vulnerability#175
fbricon merged 1 commit intoredhat-developer:masterfrom
xorye:fix_vulnerability

Conversation

@xorye
Copy link
Copy Markdown
Contributor

@xorye xorye commented Dec 13, 2019

npm audit results in the following output:

    === npm audit security report ===                        
                                                                                
# Run  npm update terser-webpack-plugin --depth 2  to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Cross-Site Scripting                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ serialize-javascript                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ webpack [dev]                                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ webpack > terser-webpack-plugin > serialize-javascript       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1426                            │
└───────────────┴──────────────────────────────────────────────────────────────┘


found 1 moderate severity vulnerability in 12267 scanned packages
  run `npm audit fix` to fix 1 of them.

The package-lock.json in this PR is the result of running npm audit fix

Signed-off-by: David Kwon dakwon@redhat.com

Signed-off-by: David Kwon <dakwon@redhat.com>
@fbricon fbricon merged commit 910f37c into redhat-developer:master Dec 17, 2019
@fbricon fbricon added this to the 1.3.0 milestone Dec 17, 2019
@fbricon fbricon added bug Something isn't working build labels Dec 17, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working build

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants