nx icon indicating copy to clipboard operation
nx copied to clipboard

Update nx packages to use latest version of semver

Open binhxn opened this issue 1 year ago • 0 comments

Hello!

Our repository uses Nx and we're currently seeing a High-rated security vulnerability via transitive dependencies. Here's the copied vulnerability message


The latest possible version that can be installed is 7.3.5 because of the following conflicting dependencies:

@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.6.0 via a transitive dependency on @typescript-eslint/[email protected]
@nx/[email protected] requires semver@^7.5.3
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.0 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.4 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.0.0 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.0 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.4 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.0.0 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires [email protected] via a transitive dependency on @module-federation/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires [email protected] via a transitive dependency on @module-federation/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.4 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
[email protected] requires semver@^6.3.0 via a transitive dependency on [email protected]
[email protected] requires semver@~5.3.0 via a transitive dependency on [email protected]
[email protected] requires semver@^5.7.1
[email protected] requires semver@~7.0.0 via [email protected]
@babel/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@babel/[email protected] requires semver@^6.3.1
@babel/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@babel/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@babel/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@babel/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@babel/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@babel/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@babel/[email protected] requires semver@^6.3.1
@babel/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@endpoint/[email protected] requires [email protected] via a transitive dependency on @commitlint/[email protected]
@endpoint/[email protected] requires semver@2 || 3 || 4 || 5 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires [email protected] via a transitive dependency on @module-federation/[email protected]
@nx/[email protected] requires semver@^7.5.4 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.3 via a transitive dependency on @nx/[email protected]
@nx/[email protected] requires semver@^6.0.0 via a transitive dependency on [email protected]
@nx/[email protected] requires semver@^7.5.4 via a transitive dependency on [email protected]
@svgr/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@svgr/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@svgr/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@svgr/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@svgr/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@svgr/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@svgr/[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
@svgr/[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
@typescript-eslint/[email protected] requires semver@^7.6.0 via a transitive dependency on @typescript-eslint/[email protected]
@typescript-eslint/[email protected] requires semver@^7.6.0 via a transitive dependency on @typescript-eslint/[email protected]
[email protected] requires semver@^7.5.4
[email protected] requires semver@^7.5.3
[email protected] requires semver@^7.6.0 via a transitive dependency on @typescript-eslint/[email protected]
[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
[email protected] requires semver@^6.3.1 via a transitive dependency on [email protected]
[email protected] requires semver@^6.3.1
[email protected] requires semver@^6.3.1
[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
[email protected] requires semver@^6.3.1 via a transitive dependency on @babel/[email protected]
[email protected] requires semver@^6.3.0 via a transitive dependency on [email protected]
[email protected] requires semver@^7.5.4 via a transitive dependency on [email protected]
[email protected] requires semver@^6.0.0 via a transitive dependency on [email protected]
[email protected] requires semver@^7.5.3 via a transitive dependency on [email protected]
[email protected] requires semver@^7.5.3
[email protected] requires semver@^7.6.3

The earliest fixed version is 7.5.2


Any chance we can get semver updated to address this issue in the coming release?

binhxn avatar Oct 15 '24 16:10 binhxn