search

justadudewhohacks / face-api.js

JavaScript API for face detection and face recognition in the browser and nodejs with tensorflow.js
MIT License
16.7k stars 3.71k forks source link

Security vulnerability - patch #921

Open DragonicDefson opened 1 year ago

DragonicDefson commented 1 year ago

Per CVE-2022-0235, see: https://github.com/advisories/GHSA-r683-j2x4-v87g

This is a request to patch the node-fetch module to at least version 2.6.7. Both audit fix and audit fix --force don't seem to work, regardless of npm stating it will fix the vulnerabilities.

With kindest regards, Bradley Methorst.

Fighter-007 commented 1 year ago

I have been facing the same issue as well

arjunmehta commented 1 month ago

@justadudewhohacks Any chance this could be merged? Audit fix is not doing anything to fix the vulnerability.