mgcrea/node-xlsx

vulnerabilities tips still exists in release/0.22.0

dafanzhi opened this issue · 6 comments

dafanzhi commented

The issue still exists in v0.22.0.
i removed the node-xlsx and xlsx, then reinstalled node-xlsx@0.22.0, but still got the same vulnerabilities tips:

➜  bodhi git:(3.5.11) ✗ npm rm node-xlsx
removed 10 packages and audited 210 packages in 2.095s

14 packages are looking for funding
  run `npm fund` for details

found 1 moderate severity vulnerability
  run `npm audit fix` to fix them, or `npm audit` for details


   ╭───────────────────────────────────────────────────────────────╮
   │                                                               │
   │      New major version of npm available! 6.14.12 → 9.6.7      │
   │   Changelog: https://github.com/npm/cli/releases/tag/v9.6.7   │
   │               Run npm install -g npm to update!               │
   │                                                               │
   ╰───────────────────────────────────────────────────────────────╯

➜  bodhi git:(3.5.11) ✗ npm rm xlsx
removed 5 packages and audited 209 packages in 1.931s

14 packages are looking for funding
  run `npm fund` for details

found 1 moderate severity vulnerability
  run `npm audit fix` to fix them, or `npm audit` for details
➜  bodhi git:(3.5.11) ✗ npm install node-xlsx@0.22.0
+ node-xlsx@0.22.0
added 7 packages from 2 contributors, removed 1 package, updated 3 packages and audited 219 packages in 2.968s

14 packages are looking for funding
  run `npm fund` for details

found 2 vulnerabilities (1 moderate, 1 high)
run `npm audit fix` to fix them, or `npm audit` for details
WikiRik commented

This issue should have been fixed with v0.23.0

  • 👍1
dafanzhi commented

fixed in v0.23.0. close this issue

Arunsanthoshh commented

How to install the v0.23.0 version in my application ?

Arunsanthoshh commented

I guess It is not published in NPM yet ?

Arunsanthoshh commented

Ok, Thank you.