Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Vulnerabilidades ao instalar bibliotecas no NodeJs #317

Open
AdrianoUFSB opened this issue Oct 31, 2020 · 0 comments
Open

Vulnerabilidades ao instalar bibliotecas no NodeJs #317

AdrianoUFSB opened this issue Oct 31, 2020 · 0 comments

Comments

@AdrianoUFSB
Copy link

Estou instalando o Forpdi na minha máquina para testar, sou da Federal do Sul da Bahia, Setor de Planejamento.

Já tinha instalado antes e funcionado, mas tive que formatar a máquina e agora não estou conseguindo mais.

Tentei instalar as bibliotecas no nodejs 10.15.3 e apareceu 5 vulnerabilidades. O que fazer?

==> npm install
C:\plataforma-for-master\frontend-web>npm install
npm WARN [email protected] requires a peer of react@^15.0.2 || ^16.0.0-beta || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.0 || ^15.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^0.14.0 || ^15.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.9 || ^15.3.0 || ^16.0.0-rc || ^16.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.9 || ^15.3.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^15.3.0 || ^16.2.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^15.3.0 || ^16.2.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^15.0.1 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.9 || ^15.3.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.0 || ^15.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^15.3.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^15.3.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.13.0 || ^0.14.0 || ^15.0.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^16.x.x but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^16.x.x but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.0 || ^15.0.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^0.14.0 || ^15.0.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@>=^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@>=^16.0.0 but none is installed. You must install peer dependencies yourself.

audited 1136 packages in 12.833s
found 5 vulnerabilities (4 low, 1 high)
run npm audit fix to fix them, or npm audit for details

==============================================

==> npm audit fix
up to date in 11.662s
fixed 0 of 5 vulnerabilities in 1136 scanned packages
5 vulnerabilities required manual review and could not be updated

==> nom audit --parseable
C:\plataforma-for-master\frontend-web>npm audit --parseable
review string high No patch available Regular Expression Denial of Service https://nodesecurity.io/advisories/536 string
review node-fetch low >=2.6.1 <3.0.0-beta.1|| >= 3.0.0-beta.9 Denial of Service https://nodesecurity.io/advisories/1556 flux>fbemitter>fbjs>isomorphic-fetch>node-fetch
review node-fetch low >=2.6.1 <3.0.0-beta.1|| >= 3.0.0-beta.9 Denial of Service https://nodesecurity.io/advisories/1556 flux>fbjs>isomorphic-fetch>node-fetch
review node-fetch low >=2.6.1 <3.0.0-beta.1|| >= 3.0.0-beta.9 Denial of Service https://nodesecurity.io/advisories/1556 react-progressbar>react>fbjs>isomorphic-fetch>node-fetch
review node-fetch low >=2.6.1 <3.0.0-beta.1|| >= 3.0.0-beta.9 Denial of Service https://nodesecurity.io/advisories/1556 react-progressbar>react-dom>fbjs>isomorphic-fetch>node-fetch

C:\plataforma-for-master\frontend-web>npm install node-fetch
npm WARN [email protected] requires a peer of react@^15.0.2 || ^16.0.0-beta || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.0 || ^15.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^0.14.0 || ^15.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.9 || ^15.3.0 || ^16.0.0-rc || ^16.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.9 || ^15.3.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^15.3.0 || ^16.2.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^15.3.0 || ^16.2.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^15.0.1 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.9 || ^15.3.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.0 || ^15.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^15.3.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^15.3.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.13.0 || ^0.14.0 || ^15.0.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^16.x.x but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^16.x.x but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@^0.14.0 || ^15.0.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@^0.14.0 || ^15.0.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react@>=^16.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN [email protected] requires a peer of react-dom@>=^16.0.0 but none is installed. You must install peer dependencies yourself.

  • [email protected]
    updated 1 package and audited 1136 packages in 13.414s
    found 5 vulnerabilities (4 low, 1 high)
    run npm audit fix to fix them, or npm audit for details
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants