Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Run npm audit fix updating vulnerable deps #445

Merged
merged 1 commit into from
Jun 21, 2024

Conversation

joshprice
Copy link
Contributor

@joshprice joshprice commented Jun 21, 2024

Vulnerabilities addressed:

❯ npm audit --prefix assets

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg
fix available via `npm audit fix`
node_modules/braces

ws  8.0.0 - 8.17.0
Severity: high
ws affected by a DoS when handling a request with many HTTP headers - https://github.com/advisories/GHSA-3h5v-q93c-6h6q
fix available via `npm audit fix`
node_modules/ws

2 high severity vulnerabilities

Address all issues, by running:

npm audit fix

```
❯ npm audit --prefix assets

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - GHSA-grv7-fg5c-xmjg
fix available via `npm audit fix`
node_modules/braces

ws  8.0.0 - 8.17.0
Severity: high
ws affected by a DoS when handling a request with many HTTP headers - GHSA-3h5v-q93c-6h6q
fix available via `npm audit fix`
node_modules/ws

2 high severity vulnerabilities
```

Address all issues, by running:

```
npm audit fix
```
@josevalim josevalim merged commit bbff5fb into phoenixframework:main Jun 21, 2024
3 checks passed
@josevalim
Copy link
Member

💚 💙 💜 💛 ❤️

@joshprice joshprice deleted the npm-audit-fix branch June 21, 2024 09:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants