You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I installed CodeceptJS at latest, then Node.js showed it has vulnerabirities. I audited and the result is:
# npm audit report
cross-spawn <6.0.6
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275
fix available via `npm audit fix --force`
Will install codeceptjs@3.5.9, which is a breaking change
node_modules/child-process-promise/node_modules/cross-spawn
child-process-promise >=2.2.0
Depends on vulnerable versions of cross-spawn
node_modules/child-process-promise
detox >=4.1.1
Depends on vulnerable versions of child-process-promise
node_modules/detox
@codeceptjs/detox-helper *
Depends on vulnerable versions of detox
node_modules/@codeceptjs/detox-helper
codeceptjs 2.2.1 || 3.5.1-2.beta.7 || >=3.5.10
Depends on vulnerable versions of @codeceptjs/detox-helper
node_modules/codeceptjs
The text was updated successfully, but these errors were encountered:
I installed CodeceptJS at latest, then Node.js showed it has vulnerabirities. I audited and the result is:
The text was updated successfully, but these errors were encountered: