antonreshetov / vue-unicons

1000+ Pixel-perfect svg icons for your next project as Vue components
https://antonreshetov.github.io/vue-unicons/
MIT License
1k stars 56 forks source link

NPM audit severity vulnerabilities #66

Open mehdisolhan opened 1 year ago

mehdisolhan commented 1 year ago

As you can see in audit report, there is a severity vulnerability problem. It is due to the nth-check package. Versions of some subpackages are outdated. npm audit fix --force or npm audit fix not working because when returning to the old version, this time, axios-related problems arise. Can you update the dependencies?

npm audit report

nth-check <2.0.1 Severity: high Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr fix available via npm audit fix --force Will install vue-unicons@2.1.0, which is a breaking change node_modules/svgo/node_modules/nth-check css-select <=3.1.0 Depends on vulnerable versions of nth-check node_modules/svgo/node_modules/css-select svgo 1.0.0 - 1.3.2 Depends on vulnerable versions of css-select node_modules/svgo @iconscout/unicons * Depends on vulnerable versions of svgo node_modules/@iconscout/unicons vue-unicons 1.3.1 - 1.4.1 || >=2.2.0 Depends on vulnerable versions of @iconscout/unicons node_modules/vue-unicons