Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

npm 에서 모듈 취약점을 알려주는데 몇가지가 있음 #46

Open
1 task
soob-forest opened this issue Nov 14, 2019 · 0 comments
Open
1 task
Assignees
Labels
bug Something isn't working

Comments

@soob-forest
Copy link
Collaborator

added 916 packages from 610 contributors and audited 878659 packages in 365.95s
found 5 high severity vulnerabilities
run npm audit fix to fix them, or npm audit for details
PS C:\Users\soob\Desktop\boostcamp\2019-16\server> npm audit

                   === npm audit security report ===                        

Run npm install --save-dev @commitlint/[email protected] to resolve 5 vulnerabilities

SEMVER WARNING: Recommended action is a potentially breaking change

High Prototype Pollution

Package lodash

Dependency of @commitlint/cli [dev]

Path @commitlint/cli > @commitlint/lint > @commitlint/rules >
@commitlint/ensure > lodash

More info https://nodesecurity.io/advisories/1065

High Prototype Pollution

Package lodash

Dependency of @commitlint/cli [dev]

Path @commitlint/cli > @commitlint/lint > lodash

More info https://nodesecurity.io/advisories/1065

High Prototype Pollution

Package lodash

Dependency of @commitlint/cli [dev]

Path @commitlint/cli > @commitlint/load >
@commitlint/resolve-extends > lodash

More info https://nodesecurity.io/advisories/1065

High Prototype Pollution

Package lodash

Dependency of @commitlint/cli [dev]

Path @commitlint/cli > @commitlint/load > lodash

More info https://nodesecurity.io/advisories/1065

High Prototype Pollution

Package lodash

Dependency of @commitlint/cli [dev]

Path @commitlint/cli > lodash

More info https://nodesecurity.io/advisories/1065

found 5 high severity vulnerabilities in 878659 scanned packages
5 vulnerabilities require semver-major dependency updates.

완료조건

  • 취약점 해결
@soob-forest soob-forest self-assigned this Nov 14, 2019
@soob-forest soob-forest added the bug Something isn't working label Nov 14, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant