Skip to content
This repository was archived by the owner on Oct 26, 2023. It is now read-only.
This repository was archived by the owner on Oct 26, 2023. It is now read-only.

Lab 2 - npm install raises vulnerability issues #14

@danhofer

Description

@danhofer

When I went to run "npm install" for this lab, 4 packages had vulnerabilities related to "Regular Expression Denial of Service".

"npm audit" told me to:

# Run 'npm install --dev local-web-server@2.5.2' to resolve 4 vulnerabilities
SEMVER WARNING: Recommended action is a potentially breaking change

I ran the npm install command to try to resolve the vulnerabilities, and it broke auth0. I couldn't sign up or log in or change my password through auth0. I would get a unhelpful error from auth0 saying "something went wrong", even though on the auth0 website, I could register users and test the registration and everything would run well.

So I made a fresh copy of the lab-2 folder and didn't update the vulnerabilities. This time, auth0 would accept my login, but the video site won't change to showing me logged in.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions