BugiDev / BugiDev/react-native-calendar-strip

Security issue : recyclerlistview

Open
#384 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
JavaScript
Stars
976
Forks
336
PR merge metrics
No merged PRs in 30d

Description

Hi,

Can you fix your dependencies ?

`
node-fetch <2.6.7
Severity: high
node-fetch forwards secure headers to untrusted sites - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix --force`
Will install react-native-calendar-strip@1.4.2, which is a breaking change
node_modules/isomorphic-fetch/node_modules/node-fetch
isomorphic-fetch 2.0.0 - 2.2.1
Depends on vulnerable versions of node-fetch
node_modules/isomorphic-fetch
fbjs 0.7.0 - 1.0.0
Depends on vulnerable versions of isomorphic-fetch
node_modules/recyclerlistview/node_modules/fbjs
prop-types 15.5.0-alpha.0 - 15.6.1
Depends on vulnerable versions of fbjs
node_modules/recyclerlistview/node_modules/prop-types
recyclerlistview <=4.0.1
Depends on vulnerable versions of prop-types
node_modules/recyclerlistview
react-native-calendar-strip >=2.0.0
Depends on vulnerable versions of recyclerlistview
node_modules/react-native-calendar-strip

6 high severity vulnerabilities
`

```json
"recyclerlistview": "^3.0.0"
```
to
```json
"recyclerlistview": "^4.2.1"
```

PR : https://github.com/BugiDev/react-native-calendar-strip/pull/385

Thanks you

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.