search

ruimarinho / bitcoin-core

A modern Bitcoin Core REST and RPC client.
477 stars 186 forks source link

Replace @uphold/request-logger at the sametime that Request with node-fetch - Server-Side Request Forgery in Request #147

Open brunoAmado opened 1 year ago

brunoAmado commented 1 year ago

Hi all, Doing an npm install and npm audit the result in terminal is:

Severity: moderate
Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6 No fix available
node_modules/request
@uphold/request-logger
Depends on vulnerable versions of request
node_modules/@uphold/request-logger
bitcoin-core Depends on vulnerable versions of @uphold/request-logger Depends on vulnerable versions of request node_modules/bitcoin-core

Launching NextJS webpage I have :

npm WARN config global --global, --local are deprecated. Use --location=global instead. warn - Lockfile was successfully patched, please run "npm install" to ensure @next/swc dependencies are downloaded event - compiled client and server successfully in 12.7s (165 modules) wait - compiling / (client and server)... error - ./node_modules/@uphold/request-logger/src/proxy.js:7:0 Module not found: Can't resolve 'fs' Import trace for requested module: ./node_modules/@uphold/request-logger/src/index.js ./node_modules/bitcoin-core/src/logging/request-logger.js ./node_modules/bitcoin-core/src/index.js ...