Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

insecureapplication/gallery/package.json references a non-existent package as its dependency #9

Open
r0075h3ll opened this issue Mar 27, 2024 · 0 comments

Comments

@r0075h3ll
Copy link

  "dependencies": {
    "amdefine": "^1.0.1",
    "array-set": "^0.1.2",
    "connect-ensure-login": "^0.1.1",
    "cookie-parser": "^1.4.3",
    "errorhandler": "^1.5.0",
    "express": "^4.16.3",
    "express-session": "^1.15.6",
    "helmet": "^3.13.0",
    "jade": "^1.11.0",
    "mongoose": "^5.2.14",
    "morgan": "^1.9.1",
    "multer": "^1.3.1",
    "oauth2orize": "^1.11.0",
    "passport": "^0.4.0",
    "passport-http": "^0.3.0",
    "passport-http-bearer": "^1.0.1",
    "passport-local-mongoose": "^5.0.1",
    "passport-oauth2-client-password": "^0.1.2",
    "pug": "^2.0.3"
  }

package.json file in Vulnerable-OAuth-2.0-Applications/insecureapplication/gallery declares a package - array-set - as one of its dependecies. Though, the installation is aborted after the following error is thrown

4.751 npm ERR! code E404
4.754 npm ERR! 404 Not Found - GET https://registry.npmjs.org/array-set/-/array-set-0.1.2.tgz
4.754 npm ERR! 404
4.754 npm ERR! 404  'array-set@0.1.2' is not in the npm registry.
4.755 npm ERR! 404 You should bug the author to publish it (or use the name yourself!)
4.756 npm ERR! 404 It was specified as a dependency of 'app'
4.756 npm ERR! 404
4.756 npm ERR! 404 Note that you can also install from a
4.757 npm ERR! 404 tarball, folder, http url, or git url.

Upon searching manually, and doing an npm search array-set, it was found out that the package, with the name array-set, doesn't exist anymore which breaks the installation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant