同学，您这个项目引入了1248个开源组件，存在5个漏洞，辛苦升级一下

[ghost]

检测到 BrianJSX/AD-Movie-React 一共引入了1248个开源组件，存在5个漏洞

漏洞标题：nodejs 资源管理错误漏洞
缺陷组件：glob-parent@3.1.0
漏洞编号：CVE-2020-28469
漏洞描述：nodejs是是一个基于ChromeV8引擎的JavaScript运行环境通过对Chromev8引擎进行了封装以及使用事件驱动和非阻塞IO的应用让Javascript开发高性能的后台应用成为了可能。
nodejs-glob-parent 存在安全漏洞，该漏洞源于正则表达式拒绝服务。
影响范围：(∞, 5.1.2)
最小修复版本：5.1.2
缺陷组件引入路径：notus-react@1.1.0->gulp@4.0.2->vinyl-fs@3.0.3->glob-stream@6.1.0->glob-parent@3.1.0
notus-react@1.1.0->gulp@4.0.2->glob-watcher@5.0.5->chokidar@2.1.8->glob-parent@3.1.0
notus-react@1.1.0->react-scripts@4.0.3->react-dev-utils@11.0.4->globby@11.1.0->fast-glob@3.2.11->glob-parent@3.1.0
notus-react@1.1.0->react-scripts@4.0.3->webpack@4.44.2->watchpack@1.7.5->chokidar@2.1.8->glob-parent@3.1.0
notus-react@1.1.0->react-scripts@4.0.3->eslint@7.32.0->glob-parent@3.1.0
notus-react@1.1.0->react-scripts@4.0.3->webpack-dev-server@3.11.1->chokidar@2.1.8->glob-parent@3.1.0

另外还有5个漏洞，详细报告：https://mofeisec.com/jr?p=a87390

[github-actions]

@kwaisecer[bot] this issue was automatically closed because it did not follow our rules:

IMPORTANT: Please use the following link to create a new issue:

https://www.creative-tim.com/new-issue/notus-react?ref=nr-new-issue

**If your issue was not created using the app above, it will be closed immediately.**



Love Creative Tim? Do you need Angular, React, Vuejs or HTML? You can visit:
👉  https://www.creative-tim.com/bundles
👉  https://www.creative-tim.com