Repository navigation
NPM Audit - 17 high vulnerabilities for solid-server 5.8.5 #1821
Description
Activity
It is now 2 Critical and 10 high. Any chance of updating the packages?
Lots of works is going on in Solid managed dependencencies SolidOS and Rdflib.
I hope it will soon solve your University concerns.Help is also deeply needed.
Cc @timea-solid
The new npm version
solid-server@5.8.8as nocriticalnorhighvulnerabilities.There only one remaining vulnerability
# npm audit report bootstrap 3.1.1 - 3.4.1 Severity: moderate Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components - https://github.com/advisories/GHSA-q58r-hwc8-rm9j Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes - https://github.com/advisories/GHSA-vxmc-5x29-h64v fix available via `npm audit fix --force` Will install bootstrap@5.3.8, which is a breaking change node_modules/bootstrapthe reason this one is not resolve is due to Boostrap licence.
Bootstrap is not directly used but only bootstrap CSSThat is great news. Thank you so much. I will update now!
Hi,
I was wondering if you would be able to address the high vulnerabilities currently in the solid-server packages used?
If you run NPM Audit it says there are 17 high vulnerabilities and my university gets quite strict about me running code with high vulnerabilities.
I would be most grateful if you could take at look and perhaps at least reduce the list, if not eliminate it?
Kind regards.