discord-music-player
discord-music-player copied to clipboard
[BUG] 5 high severity vulnerabilities when updating to v8
# npm audit report
@discordjs/opus *
Severity: high
Uncontrolled Resource Consumption in @discordjs/opus - https://github.com/advisories/GHSA-rvgf-69j7-xh78
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/@discordjs/opus
node_modules/@discordjs/voice/node_modules/@discordjs/opus
node_modules/discord-ytdl-core/node_modules/@discordjs/opus
discord-music-player >=8.0.0-dev
Depends on vulnerable versions of @discordjs/opus
node_modules/discord-music-player
prism-media 1.2.0 - 1.3.2
Depends on vulnerable versions of @discordjs/opus
node_modules/@discordjs/voice/node_modules/prism-media
node_modules/discord-ytdl-core/node_modules/prism-media
@discordjs/voice *
Depends on vulnerable versions of prism-media
node_modules/@discordjs/voice
discord-ytdl-core *
Depends on vulnerable versions of prism-media
node_modules/discord-ytdl-core
5 high severity vulnerabilities
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
The next version will fix this advisory issue as djs/opus has published a new version that, expected release is this week. It will also support DJS v14 (and v13). The only problem is that the current release still depends on it, although you should be able to force update opus to 0.8.0.
fixed