How to fix NPM package Tar, with high vulnerability about Arbitrary File Overwrite, when package is up to date?

后端 未结 4 1664
眼角桃花
眼角桃花 2021-02-01 14:19

I just installed Flickity from NPM and got an NPM Audit Security Report after running npm audit stating that I have a high vulnerability issue regarding Arbitra

4条回答
  •  名媛妹妹
    2021-02-01 14:57

    Please update the value for "tar" in your "package-lock.json" file. And to verify, run "[npm audit][1]".

    "tar": {
          "version": "4.4.8",
          "resolved": "https://registry.npmjs.org/tar/-/tar-4.4.8.tgz",
          "integrity": "value",
          "dev": true,
          "optional": true,
          "requires": {
            "block-stream": "*",
            "fstream": "^1.0.2",
            "inherits": "2"
          }
        }
    

提交回复
热议问题