storybook-deployer icon indicating copy to clipboard operation
storybook-deployer copied to clipboard

[Bug] Critical vulnerability in due to outdated dependency `git-url-parse`

Open siminino opened this issue 2 years ago • 0 comments

Describe the bug

Critical vulnerability related to git-url-parse sub dependency parse-url. It is not possible to fix it in my projects by yarn resolutions since is related to major version upgrades containing Breaking Changes. To fix it, git-url-parse must be upgraded to version 12.

Obs: also high and moderate vulnerabilities are going to be fixed by this dependency upgrade.

Steps to reproduce the behaviour

  1. clone repo;
  2. run yarn;
  3. run yarn audit;

Expected behaviour

No critical and high vulnerabilities.

Screenshots and/or logs

Screenshot 2022-07-15 at 12 20 05 Screenshot 2022-07-15 at 12 29 00

Environment

  • Node.js version: v16.13.1
  • NPM version: 8.1.2

siminino avatar Jul 15 '22 10:07 siminino