azure-functions-core-tools icon indicating copy to clipboard operation
azure-functions-core-tools copied to clipboard

npm install -g azure-functions-core-tools@4 gives this warning - npm WARN deprecated [email protected]: Debug versions >=3.2.0 <3.2.7 || >=4 <4.3.1 have a low-severity ReDos regression when used in a Node.js environment. It is recommended you upgrade to 3.2.7 or 4.3.1.

Open SiddheshDesai06 opened this issue 2 years ago • 2 comments

I am trying to install Azure Functions Core tools with this command-

npm install -g azure-functions-core-tools@4

But receiving this Warning:-

npm WARN deprecated [email protected]: Debug versions >=3.2.0 <3.2.7 || >=4 <4.3.1 have a low-severity ReDos regression when used in a Node.js environment. It is recommended you upgrade to 3.2.7 or 4.3.1. (https://github.com/visionmedia/debug/issues/797)

I also tried installing the required debug package to resolve the issue but the warning persists:-

npm install -g [email protected]
npm install -g [email protected]

enter image description here

Note- There are mutliple Open Issues on the same but they are not been resolved- https://github.com/Azure/azure-functions-core-tools/issues/3436 https://github.com/Azure/azure-functions-core-tools/issues/3301 https://github.com/Azure/azure-functions-core-tools/issues/3242

SiddheshDesai06 avatar Dec 07 '23 08:12 SiddheshDesai06

Found the dependency listed in the npm-shrinkwrap.json: https://github.com/Azure/azure-functions-core-tools/blob/5f073f913376d3e589e1b2e3fcbdd76c67f83d58/src/Azure.Functions.Cli/npm/npm-shrinkwrap.json#L131-L139

Please patch this.

wells avatar Dec 20 '23 17:12 wells

@khkh-ms you seem to be the main contributor to this repository for the last year, can you please run npm audit fix next time you're creating an update? That would resolve this issue immediately.

svrooij avatar Feb 20 '24 10:02 svrooij