You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
git clone https://github.com/jackyzha0/quartz.git
cd quartz
npm i
Expected behavior
NPM does not find any high severity vulnerabilities.
Screenshots and Source
This is my console output for npm i
oliver@vmi1560528:~/vps/apps/quartz$ npm i
added 521 packages, and audited 523 packages in 22s
171 packages are looking for funding
run `npm fund` for details
5 vulnerabilities (2 moderate, 3 high)
To address issues that do not require attention, run:
npm audit fix
Some issues need review, and may require choosing
a different dependency.
Run `npm audit` for details.
npm notice
npm notice New minor version of npm available! 10.2.3 -> 10.9.0
npm notice Changelog: https://github.com/npm/cli/releases/tag/v10.9.0
npm notice Run npm install -g [email protected] to update!
npm notice
oliver@vmi1560528:~/vps/apps/quartz$ npm audit fix
changed 4 packages, and audited 523 packages in 3s
171 packages are looking for funding
run `npm fund` for details
# npm audit report
path-to-regexp 2.0.0 - 3.2.0
Severity: high
path-to-regexp outputs backtracking regular expressions - https://github.com/advisories/GHSA-9wv6-86v2-598j
No fix available
node_modules/path-to-regexp
serve-handler *
Depends on vulnerable versions of path-to-regexp
node_modules/serve-handler
2 high severity vulnerabilities
Some issues need review, and may require choosing
a different dependency.
Desktop (please complete the following information):
Quartz Version: v4.4.0
node Version: v20.10.0
npm version: v10.2.3
OS: Ubuntu
The text was updated successfully, but these errors were encountered:
Describe the bug
NPM audit finds high severity vulnerabilities when doing npm install.
To Reproduce
Follow steps at https://quartz.jzhao.xyz/
Expected behavior
NPM does not find any high severity vulnerabilities.
Screenshots and Source
This is my console output for npm i
Desktop (please complete the following information):
node
Version: v20.10.0npm
version: v10.2.3The text was updated successfully, but these errors were encountered: