Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Need to update object-path dependency. #78

Open
joelschlotterer opened this issue Dec 24, 2020 · 2 comments
Open

Need to update object-path dependency. #78

joelschlotterer opened this issue Dec 24, 2020 · 2 comments

Comments

@joelschlotterer
Copy link

───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ object-path │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.11.5 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ asset-builder [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ asset-builder > object-path │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/1573

@vijayhardaha
Copy link

It's been fixed in #79 but still waiting author to release the new version :D hope author will have time soon.

@vijayhardaha
Copy link

Meanwhile, I am using npm-force-resolutions to get rid of all the issues from the packages. If you want to solve the issues then you can follow these steps:

First, you need to add new script "preinstall": "npx npm-force-resolutions" in you package.json
Your scripts code will look like this:

"scripts": {
    "preinstall": "npx npm-force-resolutions",
    // Other scripts goes here.
}

Then in your package.json, you'll have to add a new node "resolutions" and inside that, you'll have to specify the package name and version that suggested to fix the issue.

In the case of asset-builder the code will look like this:

"resolutions": {
    "object-path": "^0.11.8"
}

then run the npm install and the issue will be removed for object-path

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants