FirebaseExtended / FirebaseExtended/rxfire

Rxfire was downgraded to 3.13.5 when fixing high severity vulnerabilities

Open
#51 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
149
Forks
50
PR merge metrics
No merged PRs in 30d

Description

From the log: node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g

After installing: firebase-tools 10.0.1 → 10.1.2

```
{
"name": "... accounts",
"version": "1.2.2",
"author": "voscausa",
"repository": {
"type": "git",
"url": "https://github.com/voscausa/...-accounts"
},
"license": "MIT",
"type": "module",
"scripts": {
"dev": "vite",
"life": "vite --mode life_dev",
"build": "vite build",
"serve": "vite preview"
},
"devDependencies": {
"@beyonk/svelte-notifications": "^4.1.1",
"@sveltejs/vite-plugin-svelte": "^1.0.0-next.33",
"@voscausa/svelte-use-validate": "^1.3.4",
"eslint": "^8.1.0",
"firebase": "^9.6.4",
"jszip": "^3.7.1",
"lodash.clonedeep": "^4.5.0",
"lodash.isequal": "^4.5.0",
"rxfire": "^3.13.5", // from "rxfire": "^6.0.3"
"rxjs": "^7.4.0",
"svelte": "^3.44.3",
"vite": "^2.7.10"
}
}

```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.