forked from iwsfg/node-potrace
-
Notifications
You must be signed in to change notification settings - Fork 37
Open
Description
npm audit:
# npm audit report
phin <3.7.1
Severity: moderate
phin may include sensitive headers in subsequent requests after redirect - https://github.com/advisories/GHSA-x565-32qp-m3vf
fix available via `npm audit fix --force`
Will install potrace@2.1.1, which is a breaking change
node_modules/phin
@jimp/core <=0.21.4--canary.1163.d07ed6254d130e2995d24101e93427ec091016e6.0
Depends on vulnerable versions of phin
node_modules/@jimp/core
@jimp/custom <=0.21.4--canary.1163.d07ed6254d130e2995d24101e93427ec091016e6.0
Depends on vulnerable versions of @jimp/core
node_modules/@jimp/custom
jimp 0.3.6-alpha.5 - 0.21.4--canary.1163.d07ed6254d130e2995d24101e93427ec091016e6.0
Depends on vulnerable versions of @jimp/custom
node_modules/jimp
potrace >=2.1.2
Depends on vulnerable versions of jimp
node_modules/potrace
5 moderate severity vulnerabilities
See also: jimp-dev/jimp#1291
In the meantime, I've added this to my package.json:
"overrides": {
"phin": "3.7.1"
},
Metadata
Metadata
Assignees
Labels
No labels