search

ionic-team / ionic-app-scripts

App Build Scripts for Ionic Projects
http://ionicframework.com/
MIT License
608 stars 302 forks source link

Dependency vulnerabilities "mem" #1542

Open jacobscarter opened 4 years ago

jacobscarter commented 4 years ago

Short description of the problem:

npm audit returns security vulnerabilities for the dependency "mem"

What behavior are you expecting?

Package up to date with latest security patches.

Steps to reproduce:

  1. npm install @ionic/app-scripts
  2. npm audit
                       === npm audit security report ===                        

┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Denial of Service                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ mem                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.0.0                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @ionic/app-scripts [dev]                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @ionic/app-scripts > webpack > yargs > os-locale > mem       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/1084                      │
└───────────────┴──────────────────────────────────────────────────────────────┘

Which @ionic/app-scripts version are you using? 3.2.4

Other information: (e.g. stacktraces, related issues, suggestions how to fix, stackoverflow links, forum links, etc)