Fix npm Vulnerabilities Check
Open
bug
- Dominant language
- Python
- Stars
- 30
- Forks
- 22
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 22
Description
# 🐛 Summary #
`frontend` and `backend` security checks issue warnings on `npm audit report`.
1. Express.js Open Redirect in malformed URLs
2. follow-redirects’ Proxy-Authorization header kept across hosts
3. jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
4. typeorm - Tracked: https://github.com/cisagov/XFD/pull/158
To address all these issues, you can run: `npm audit fix` or `npm audit fix --force`
Contributor guide
Assessment
This issue has not been assessed yet.