Questions tagged [npm-vulnerabilities]
52 questions
0
votes
1 answer
how to resolve cve CVE-2020-28052 json-schema for npm
By performing a dependency check using owasp 7.0.4 on my project, which uses java for BE and JS for BFE, i got ceveral CVEs noted over 8. One is the json-schema package used by npm. This the packages configuration in the…
Bratar
- 19
- 2
0
votes
1 answer
shell-quote 1.7.2 vulnerabilities -unable to fix it using force reslutions
I have a nextjs app which has "next": "^10.2.0". It in turn has shell-quote as a transitive dependency and the version installed in 1.7.2 which has some critical security vulnerabilities. I have to fix this for now, and shell-quote version 1.7.3…
keerti
- 245
- 5
- 19
0
votes
1 answer
Trouble installing Ganache on fresh WSL
I'm new to coding. I'm using Windows10 and just installed a WSL. I want to install Ganache using the command npm install -g ganache-cli but it says it has 8 vulnerabilities (7 moderate,1 high)
When I write npm audit fix or npm audit fix --force it…
HippityHoppity
- 1
- 1
0
votes
2 answers
vulnerability warning in npm packages when creating Expo project
When i install some npm packages into my projects, for most, i get a warning or a vulnerability error.
npm WARN deprecated svgo@1.3.2: This SVGO version is no longer supported. Upgrade to v2.x.x.
npm WARN deprecated graphql-tools@3.0.0: This…
user16649222
0
votes
1 answer
How to solve vulnerabilities in REACT JS
I am an absolute beginner in React N/JS. I have been learning from several videos and tried creating an app using the npx create-react-app *app name* . I made the same app before which was running fine, but I started over with the same app after a…
Faisal S. Abd.
- 1
- 1
-1
votes
0 answers
I am facing problem with Reflected XSS vulnerabilities in my router file
My code:
router.post('/loadDetails', async (req, res) => {
try {
var resultData = await myService.postRequest(req.body, 'myconfig/loadAllSDetails');
res.send(resultData);
}
catch(error) {
…
bhanu prakash
- 1
- 1
-2
votes
1 answer
if I run create-react-app it is built with yarn
hi i have a problem when i create creat app it build with yarn and i didn't use yarn in my life and when i use npm to install any think it show a problems i tried to use (create-react-app my-project --use-npm) and i removed yarn.lock i found the…
mootez
- 11
- 1