discord-music-player icon indicating copy to clipboard operation
discord-music-player copied to clipboard

[BUG] 5 high severity vulnerabilities when updating to v8

Open warior456 opened this issue 2 years ago • 1 comments

# npm audit report

@discordjs/opus  *
Severity: high
Uncontrolled Resource Consumption in @discordjs/opus - https://github.com/advisories/GHSA-rvgf-69j7-xh78
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/@discordjs/opus
node_modules/@discordjs/voice/node_modules/@discordjs/opus
node_modules/discord-ytdl-core/node_modules/@discordjs/opus
  discord-music-player  >=8.0.0-dev
  Depends on vulnerable versions of @discordjs/opus
  node_modules/discord-music-player
  prism-media  1.2.0 - 1.3.2
  Depends on vulnerable versions of @discordjs/opus
  node_modules/@discordjs/voice/node_modules/prism-media
  node_modules/discord-ytdl-core/node_modules/prism-media
    @discordjs/voice  *
    Depends on vulnerable versions of prism-media
    node_modules/@discordjs/voice
    discord-ytdl-core  *
    Depends on vulnerable versions of prism-media
    node_modules/discord-ytdl-core

5 high severity vulnerabilities

To address issues that do not require attention, run:
  npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix --force

warior456 avatar Jun 26 '22 21:06 warior456

The next version will fix this advisory issue as djs/opus has published a new version that, expected release is this week. It will also support DJS v14 (and v13). The only problem is that the current release still depends on it, although you should be able to force update opus to 0.8.0.

sirlupusdev avatar Jul 19 '22 06:07 sirlupusdev

fixed

SushiBtw avatar Sep 04 '22 19:09 SushiBtw