Skip to content
This repository has been archived by the owner on May 10, 2024. It is now read-only.

Update webpack #1057

Closed
jumde opened this issue Apr 16, 2019 · 1 comment
Closed

Update webpack #1057

jumde opened this issue Apr 16, 2019 · 1 comment

Comments

@jumde
Copy link
Contributor

jumde commented Apr 16, 2019

$ npm audit

                       === npm audit security report ===

# Run  npm update fsevents --depth 4  to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High          │ Arbitrary File Overwrite                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ tar                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ webpack [dev]                                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ webpack > watchpack > chokidar > fsevents > node-pre-gyp >   │
│               │ tar                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/803                             │
└───────────────┴──────────────────────────────────────────────────────────────┘


found 1 high severity vulnerability in 7171 scanned packages
@iccub iccub added blocked If a ticket is blocked for some reason, if not using a sub-block label, please provide info in issue QA/No release-notes/exclude labels Apr 17, 2019
@iccub iccub added bug and removed blocked If a ticket is blocked for some reason, if not using a sub-block label, please provide info in issue labels Aug 8, 2019
@iccub
Copy link
Contributor

iccub commented Aug 8, 2019

Will be fixed in #1071

@iccub iccub closed this as completed Aug 8, 2019
@iccub iccub added the won't have Requirement which the project team has agreed it will not deliver label Aug 8, 2019
@jhreis jhreis removed the won't have Requirement which the project team has agreed it will not deliver label Aug 8, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants