Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update path-to-regexp and express to patch security vulnerability #3320

Merged
merged 1 commit into from
Dec 11, 2024

Conversation

shermanhuman
Copy link
Contributor

Description

npm audit fix for docusaurus:

✨ soulglow ~\github\continue\docs\docs  git:(main)
❯ npm audit
# npm audit report

path-to-regexp  <0.1.12
Severity: moderate
Unpatched `path-to-regexp` ReDoS in 0.1.x - https://github.com/advisories/GHSA-rhx6-c78j-4q9w
fix available via `npm audit fix`
node_modules/express/node_modules/path-to-regexp
  express  4.0.0-rc1 - 4.21.1 || 5.0.0-alpha.1 - 5.0.0-beta.3
  Depends on vulnerable versions of path-to-regexp
  node_modules/express

2 moderate severity vulnerabilities

To address all issues, run:
  npm audit fix
✨ soulglow ~\github\continue\docs\docs  git:(main)
❯ npm audit fix

changed 2 packages, and audited 1225 packages in 1s

298 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

Testing

I ran a quick test of navigation, dark/light themes, looked for images/animations failing. All looks good to me locally.

Copy link

netlify bot commented Dec 11, 2024

Deploy Preview for continuedev ready!

Name Link
🔨 Latest commit 67d124f
🔍 Latest deploy log https://app.netlify.com/sites/continuedev/deploys/6759d9aa34f3850008820071
😎 Deploy Preview https://deploy-preview-3320--continuedev.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@sestinj sestinj merged commit ccfdedc into continuedev:main Dec 11, 2024
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants