npm audit fix
avant | après |
---|---|
![]() |
![]() |
$ npm audit
# npm audit report
postcss <8.4.31
Severity: moderate
PostCSS line return parsing error - https://github.com/advisories/GHSA-7fh5-64p2-3v2j
fix available via `npm audit fix`
node_modules/postcss
undici <5.26.2
Undici's cookie header not cleared on cross-origin redirect in fetch - https://github.com/advisories/GHSA-wqq4-5wpv-mx2g
fix available via `npm audit fix`
node_modules/undici
@sveltejs/kit 1.0.0-next.0 - 1.25.2
Depends on vulnerable versions of undici
node_modules/@sveltejs/kit
vite 4.0.0 - 4.5.1
Severity: high
Vite XSS vulnerability in `server.transformIndexHtml` via URL payload - https://github.com/advisories/GHSA-92r3-m2mg-pj97
Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem - https://github.com/advisories/GHSA-c24v-8rfc-w8vw
fix available via `npm audit fix`
node_modules/vite
4 vulnerabilities (2 low, 1 moderate, 1 high)
To address all issues, run:
npm audit fix