You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The irc-client & irc-protocols are dependent on an old version of Mocha which has some big security vulnerabilities. I may have to fork the IRC dependencies and see if I can update them depend on a to newer version of Mocha. It's only used for testing, so hopefully it will be easy.
I did local forks of the IRC deps and removed Mocha from them and the vulnerabilities went away.
Before removing Mocha from irc-client:
found 3 vulnerabilities (1 moderate, 1 high, 1 critical)
run npm audit fix to fix them, or npm audit for details
The dependencies versions does not allow this project to run on Node 12 (current Node LTS).
I was able to remove the versions of the dependencies from package.json, then I was able to run it using Node 12.
I also reported this in #cabal.club on IRC.
The text was updated successfully, but these errors were encountered: