google / google/grr

[GUI] Upgrade fsevents package

Open
#1,040 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
5.1k
Forks
796
PR merge metrics
No merged PRs in 30d

Description

**Environment**
- How did you install GRR? source
- What GRR version are you running?: 5.7.6
- What operating system does the GRR server run on? n/a
- What operating system does the affected GRR client run on, if applicable? n/a

**Describe the issue**
Current `fsevents` package version(ex: [package-lock.json](https://github.com/google/grr/blob/master/grr/server/grr_response_server/gui/static/package-lock.json#L2813)) is vulnerable to a [critical vulnerability](https://security.snyk.io/vuln/SNYK-JS-FSEVENTS-5487987).

**Error logs**
n/a

**Additional context**
If possible please upgrade the `fsevents` package version (`>= 2.3.2`) for the next release.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.