beatrizsmerino/vue-users

Vulnerabilities in the Dependabot alerts

Closed this issue · 1 comments

image

Hi! I need help to remove these annoying security alerts on the dependencies.
I would like to upgrade the packages to a stable version.

Security Alerts:

  • ansi-regex
  • nth-check
  • set-value
  • ansi-html

Many of these alerts indicate this to me:
Dependabot cannot update set-value to a non-vulnerable version

I don't know if I should:

  1. update the stable version you indicate me, manually in the package-lock.json file.
  2. Install it as a dependency so that it appears in the package.json file with npm install.
  3. Search for a more stable version of the package or its dependencies.

I appreciate any PR and advice

Found vulnerabilities on the dependencies

Running the command npm audit in the terminal returns a list with 'Some vulnerabilities require your attention to resolve':

Package ansi-regex

image

Package nth-check

image

Package set-value

image

Package ansi-html

image

Package glob-parent

image