cloud-native-toolkit / cloud-native-toolkit/planning

GitHub Dependabot finds 10 vulnerabilities in template-node-angular

Open
#439 0 comments 0 reactions 0 assignees View on GitHub
bug code pattern
Dominant language
No language data
Stars
4
Forks
1
PR merge metrics
No merged PRs in 30d

Description

Dependabot in GitHub examined the code in template-node-angular and found 10 vulnerabilities: 2 critical, 1 high, 7 moderate.

To reproduce, create your own repo from the template and GitHub should complain about the code in your repo.

Critical severity:
- flatmap-stream in package-lock.json
- event-stream in package-lock.json

High severity:
- set-value in package-lock.json

Moderate severity:
- websocket-extensions in client/package-lock.json
- acorn in client/package-lock.json
- minimist in client/package-lock.json
- kind-of in client/package-lock.json
- serialize-javascript in client/package-lock.json
- minimist in package-lock.json
- kind-of in package-lock.json

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.