Open sonisaurabh19 opened 3 years ago
npm audit should pass
npm audit
npm audit shows a vulnerability in 4.1.3:
bootstrap <3.4.1 || >=4.0.0 <4.3.1 Severity: moderate Cross-Site Scripting - https://npmjs.com/advisories/891 No fix available node_modules/shards-vue/node_modules/bootstrap shards-ui 2.0.0 - 2.1.2 Depends on vulnerable versions of bootstrap node_modules/shards-vue/node_modules/shards-ui shards-vue * Depends on vulnerable versions of shards-ui node_modules/shards-vue
Upgrade bootstrap to >= 4.3.1 Upgrade shards-ui >= 3.0.0
Expected Behavior
npm audit
should passCurrent Behavior
npm audit shows a vulnerability in 4.1.3:
npm audit report
bootstrap <3.4.1 || >=4.0.0 <4.3.1 Severity: moderate Cross-Site Scripting - https://npmjs.com/advisories/891 No fix available node_modules/shards-vue/node_modules/bootstrap shards-ui 2.0.0 - 2.1.2 Depends on vulnerable versions of bootstrap node_modules/shards-vue/node_modules/shards-ui shards-vue * Depends on vulnerable versions of shards-ui node_modules/shards-vue
Steps to Reproduce
Context (Environment)
Possible Solution
Upgrade bootstrap to >= 4.3.1 Upgrade shards-ui >= 3.0.0
Possible Implementation