search

R2NorthstarTools / FlightCore

Installer/Updater/Launcher for Northstar
MIT License
63 stars 14 forks source link

chore: Bump vulnerable npm packages #1040

Closed GeckoEidechse closed 2 weeks ago

GeckoEidechse commented 2 weeks ago 
# npm audit report

rollup  <2.79.2
Severity: high
DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS - https://github.com/advisories/GHSA-gcx4-mw62-g8wm
fix available via `npm audit fix`
node_modules/rollup

vite  <=3.2.10
Severity: moderate
Vite's `server.fs.deny` did not deny requests for patterns with directories. - https://github.com/advisories/GHSA-8jhw-289h-jh2g
Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS - https://github.com/advisories/GHSA-64vr-g452-qvp3
Vite's `server.fs.deny` is bypassed when using `?import&raw` - https://github.com/advisories/GHSA-9cwx-2883-4wfx
fix available via `npm audit fix`
node_modules/vite

2 vulnerabilities (1 moderate, 1 high)