#1039 Update the dependecy that have moderate vulnerabilities #1051

Merged
c24danli merged 2 commits from #1039-dependencies-with-mid-vulnerabilities into team_2_week_7 2026-05-22 09:38:09 +00:00
Collaborator

Regarding issue #1039 : Update the dependencies that have moderate vulnerabilities.

Problems: 1. When installing the dependencies by running the install scripts, one used to see a list from low to high vulnerabilities. Update the moderate ones, without making the projects functionality affected.

Solution: 1. Since npm audit fix had already been run, there were only outdated packets left with un-updated dependencies. Overrode three dependencies to get newer versions that solve bugs they previously had. "webpack-dev-server" (used for react dev servers, hot reload and local development servers), "postcss" (used for tailwind, autoprefixes, CSS transforms and CRA CSS pipelines) and "@tootallnate/once" (utility for waiting for an event to happen one time, ex await once()).

Notes:

  • To check that all vulnerabilities are gone you can go into frontend and open a command prompt and do "npm audit".
  • All low vulnerabilities are solved as well.
Regarding issue #1039 : Update the dependencies that have moderate vulnerabilities. Problems: 1. When installing the dependencies by running the install scripts, one used to see a list from low to high vulnerabilities. Update the moderate ones, without making the projects functionality affected. Solution: 1. Since npm audit fix had already been run, there were only outdated packets left with un-updated dependencies. Overrode three dependencies to get newer versions that solve bugs they previously had. "webpack-dev-server" (used for react dev servers, hot reload and local development servers), "postcss" (used for tailwind, autoprefixes, CSS transforms and CRA CSS pipelines) and "@tootallnate/once" (utility for waiting for an event to happen one time, ex await once()). Notes: - To check that all vulnerabilities are gone you can go into frontend and open a command prompt and do "npm audit". - All low vulnerabilities are solved as well.
Overridden mid to low vulnerabilities
Collaborator

I'm still getting five moderate vulnerabilities, which probably aren't a problem:
image

I'm still getting five moderate vulnerabilities, which probably aren't a problem: ![image](/attachments/0ad01761-1402-4760-a0c5-e2ddf1aa28a3)
Author
Collaborator

Will take a look!

Will take a look!
Added uuid to override
Author
Collaborator

Uuid is used to generate uuids, in this case it was a bug in older versions that was causing the vulnerability.

Uuid is used to generate uuids, in this case it was a bug in older versions that was causing the vulnerability.
Collaborator

Now gives zero vulnerabilities, ready to merge!

Now gives zero vulnerabilities, ready to merge!
c24danli merged commit 3f360419de into team_2_week_7 2026-05-22 09:38:09 +00:00
c24danli deleted branch #1039-dependencies-with-mid-vulnerabilities 2026-05-22 12:26:31 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Andras/BoundlessFlowCampus2K!1051
No description provided.