Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Depends on vulnerable versions of cookie #426

Open
avi-agg opened this issue Oct 16, 2024 · 4 comments
Open

Depends on vulnerable versions of cookie #426

avi-agg opened this issue Oct 16, 2024 · 4 comments
Labels
bug Something isn't working

Comments

@avi-agg
Copy link

avi-agg commented Oct 16, 2024

npm audit report

cookie <0.7.0
cookie accepts cookie name, path, and domain with out of bounds characters - GHSA-pxg6-pf52-xh8x
fix available via npm audit fix --force
Will install @nuxtjs/[email protected], which is a breaking change
node_modules/cookie
@supabase/ssr *
Depends on vulnerable versions of cookie
node_modules/@supabase/ssr
@nuxtjs/supabase >=1.3.1
Depends on vulnerable versions of @supabase/ssr
node_modules/@nuxtjs/supabase

3 low severity vulnerabilities

To address all issues (including breaking changes), run:
npm audit fix --force

@avi-agg avi-agg added the bug Something isn't working label Oct 16, 2024
@avi-agg
Copy link
Author

avi-agg commented Oct 21, 2024

Could someone provide a solution for this issue? I am managing a production website.

@avi-agg
Copy link
Author

avi-agg commented Oct 26, 2024

Is this repo still active?

@larbish @atinux @danielroe

Please help me!

@th1m0
Copy link
Contributor

th1m0 commented Oct 28, 2024

@avi-agg this is an upstream dependency from https://github.com/supabase/ssr. It looks like it will be fixed in v0.5.2.

@avi-agg
Copy link
Author

avi-agg commented Oct 29, 2024

I am still getting this error in my Nuxt project

@avi-agg this is an upstream dependency from https://github.com/supabase/ssr. It looks like it will be fixed in v0.5.2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants