Repository navigation
Report High severity vulnerability in react-scripts 3.4.3 dependencies #9840
Description
After auditing my app a high vulnerability is detected in the package object-path dependency of react-scripts.
I tried to run an audit fix however I still got the issue 1 vulnerability requires manual review. See the full report for details..
I tried to fix it manually but react-scripts is forcing the use of version 0.11.4 and I need to update it to version 0.11.5 to fix the vulnerability.
React version:
npm version: 6.14.8
current version of react-scripts: 3.4.3
Activity
florianeckerstorfer commentedon Oct 20, 2020
react-scriptssets the version ofresolve-url-loaderto v3.1.1, the dependency has been updated inresolve-url-loader@3.1.2(PR). That is, react-scripts needs to update to bump the version ofresolve-url-loader.johannespfeiffer commentedon Oct 20, 2020
Created this PR to bump the version: #9841
gaearon commentedon Oct 20, 2020
Let's discuss in #9842 of which this is a duplicate.