igniteui-cli
igniteui-cli copied to clipboard
bad dependency `mem`: Denial of Service in mem - https://github.com/advisories/GHSA-4xcv-9jjx-gfj3
Description
NPM AUDIT is giving the following:
Denial of Service in mem - https://github.com/advisories/GHSA-4xcv-9jjx-gfj3 No fix available node_modules/mem os-locale 2.0.0 - 3.0.0 Depends on vulnerable versions of mem node_modules/os-locale yargs 8.0.0-candidate.0 - 12.0.5 Depends on vulnerable versions of os-locale Depends on vulnerable versions of yargs-parser node_modules/igniteui-cli/node_modules/yargs igniteui-cli * Depends on vulnerable versions of yargs node_modules/igniteui-cli
- Ignite UI CLI version: "13.1.15"
- Framework: Angular
- Project type: ig-ts|igx-ts
Steps to reproduce
- Step 1: run
npm audit
Result
dependencies on yargs > mem which is deprecated
Expected result
Update dependencies to maintained packages