wojtekmaj / react-pdf

Display PDFs in your React app as easily as if they were images.
https://projects.wojtekmaj.pl/react-pdf
MIT License
8.97k stars 861 forks source link

"2 high severity vulnerabilities" just after installing react-pdf #1791

Closed jadejamig closed 1 month ago

jadejamig commented 1 month ago

Before you start - checklist

Description

I am getting this vulnerability message after running npm install react-pdf

image

I have tried looking for fixes but can't see anyone talking about it.

npm audit fix --force downgrades the package version to 0.0.10 from 8.0.2 which doesn't look pretty good

Steps to reproduce

You can clone my repo here https://github.com/jadejamig/pdf-chatinator and try to install react-pdf

Expected behavior

no vulnerabilities

Actual behavior

2 high vulnerabilities

Additional information

No response

Environment

wojtekmaj commented 1 month ago

See https://github.com/wojtekmaj/react-pdf/discussions/1786