You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The audit report suggests a downgrade to Azurite 3.12.0 despite having just installed Azurite 3.33.0.
There is no clear way to resolve the vulnerable package errors while staying on the latest Azurite version.
The audit report is here:
up to date, audited 308 packages in 2s
67 packages are looking for funding
run `npm fund` for details
# npm audit report
@azure/identity <4.2.1
Severity: moderate
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability - https://github.com/advisories/GHSA-m5vv-6r4h-3vj9
fix available via `npm audit fix --force`
Will install azurite@3.12.0, which is a breaking change
node_modules/@azure/identity
tedious 11.0.9 - 18.2.0
Depends on vulnerable versions of @azure/identity
node_modules/tedious
azurite >=3.0.0-preview
Depends on vulnerable versions of @azure/ms-rest-js
Depends on vulnerable versions of axios
Depends on vulnerable versions of tedious
node_modules/azurite
axios 0.8.1 - 0.27.2
Severity: moderate
Axios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx
fix available via `npm audit fix --force`
Will install azurite@3.12.0, which is a breaking change
node_modules/@azure/ms-rest-js/node_modules/axios
node_modules/axios
@azure/ms-rest-js <=2.6.6
Depends on vulnerable versions of axios
Depends on vulnerable versions of tough-cookie
Depends on vulnerable versions of xml2js
node_modules/@azure/ms-rest-js
tough-cookie <4.1.3
Severity: moderate
tough-cookie Prototype Pollution vulnerability - https://github.com/advisories/GHSA-72xf-g2v4-qvf3
fix available via `npm audit fix --force`
Will install azurite@3.12.0, which is a breaking change
node_modules/tough-cookie
xml2js <0.5.0
Severity: moderate
xml2js is vulnerable to prototype pollution - https://github.com/advisories/GHSA-776f-qx25-q3cc
fix available via `npm audit fix --force`
Will install azurite@3.12.0, which is a breaking change
node_modules/@azure/ms-rest-js/node_modules/xml2js
7 moderate severity vulnerabilities
To address all issues (including breaking changes), run:
npm audit fix --force
The text was updated successfully, but these errors were encountered:
This may be blocked by #2470.
Steps to repro:
npm init
npm install azurite --save --include=dev
npm audit
The audit report suggests a downgrade to Azurite 3.12.0 despite having just installed Azurite 3.33.0.
There is no clear way to resolve the vulnerable package errors while staying on the latest Azurite version.
The audit report is here:
The text was updated successfully, but these errors were encountered: