hanseaston / pandemic-produce-delivery-project

An open-source e-commerce shop using React, Express, Firebase, and MongoDB. Designed for pandemic-relief and social good. The project is no longer actively maintained, but feel free to fork and use for your own purpose!
MIT License
26 stars 38 forks source link

Upgraded react-scripts version to fix high severity security vulnerability #56

Closed karimkhattaby closed 2 years ago

karimkhattaby commented 4 years ago

Npm was showing a high severity vulnerability with serialize-javascript, which is a dependency of react-scripts. The vulnerability allowed Remote Code Execution, and it was resolved by running npm update react-scripts --depth 1 as suggested by npm. This pull request upgrades react-scripts version in client's package.json to resolve the vulnerability.