#1039 Update the dependecy that have moderate vulnerabilities #1051
No reviewers
Labels
No labels
_CRITICAL_
API
app
backEnd
Blocked, waiting for further changes
bug
cleanup
close
design
duplicate
enhancement
feature request
frontEnd
help wanted
invalid
low priority
needs input
needs review
project documentation
question
research
reviewed
script
security
SQL
style
testing
topLevel
wontfix
No milestone
No project
No assignees
2 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
Andras/BoundlessFlowCampus2K!1051
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "#1039-dependencies-with-mid-vulnerabilities"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Regarding issue #1039 : Update the dependencies that have moderate vulnerabilities.
Problems: 1. When installing the dependencies by running the install scripts, one used to see a list from low to high vulnerabilities. Update the moderate ones, without making the projects functionality affected.
Solution: 1. Since npm audit fix had already been run, there were only outdated packets left with un-updated dependencies. Overrode three dependencies to get newer versions that solve bugs they previously had. "webpack-dev-server" (used for react dev servers, hot reload and local development servers), "postcss" (used for tailwind, autoprefixes, CSS transforms and CRA CSS pipelines) and "@tootallnate/once" (utility for waiting for an event to happen one time, ex await once()).
Notes:
I'm still getting five moderate vulnerabilities, which probably aren't a problem:

Will take a look!
Uuid is used to generate uuids, in this case it was a bug in older versions that was causing the vulnerability.
Now gives zero vulnerabilities, ready to merge!