meinaart / cypress-plugin-snapshots

Plugin for snapshot tests in Cypress.io
MIT License
489 stars 116 forks source link

cypress-plugin-snapshots high severity vulnerabilities #174

Open krisraven opened 3 years ago

krisraven commented 3 years ago

Describe the bug npm audit shows that cypress-plugin-snapshots contains high severity vulnerabilities (it depends on a vulnerable version of unidiff)

To Reproduce Steps to reproduce the behavior:

  1. Go to the same place where cypress-plugin-snapshots is in the package.json
  2. Run npm audit
  3. Wait until this process completes
  4. Message shows "cypress-plugin-snapshots * Depends on vulnerable versions of unidiff node_modules/cypress-plugin-snapshots
  5. See error message in screenshot

Expected behavior There are no high severity vulnerabilities.

Screenshots image

Desktop (please complete the following information):