Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug 回报:package.json依赖中有较多的模块版本有漏洞 #74

Closed
KirisameMarisas opened this issue Jul 7, 2021 · 1 comment
Assignees

Comments

@KirisameMarisas
Copy link

KirisameMarisas commented Jul 7, 2021

  1. 对Bug的描述:
    在主题文件夹中使用npm install 安装相关npm modules 时,npm audit审计报出依赖中有较多漏洞。

  2. 复现Bug的方法:
    可以使用如下的方案进行复现:
    在最新版本的主题文件夹下使用npm install 报出依赖有漏洞。

  3. 期望的行为:
    正常安装安全依赖

  4. 相关的截图:
    image
    image

  5. 运行环境(如果该Bug的产生和环境有关,例如浏览器不兼容导致):
    操作系统:Win10 wsl2 (Ubuntu 20.04)
    浏览器:Chrome 91.0.4472.124
    Nodejs:16.4.2
    npm:7.19.1

  6. 补充内容:
    在使用npm audit fix 之后,依旧存在此问题。
    PS: 找到使用ncu自动更新npm module后漏洞数量减少
    image
    image

@Candinya
Copy link
Owner

Candinya commented Jul 7, 2021

已经修复,非常感谢提醒 👌 ❤️

@Candinya Candinya closed this as completed Jul 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants