Depends on vulnerable versions of cookie

Open avi-agg opened this issue 1 year ago • 5 comments

npm audit report

cookie <0.7.0 cookie accepts cookie name, path, and domain with out of bounds characters - https://github.com/advisories/GHSA-pxg6-pf52-xh8x fix available via npm audit fix --force Will install @nuxtjs/[email protected], which is a breaking change node_modules/cookie @supabase/ssr * Depends on vulnerable versions of cookie node_modules/@supabase/ssr @nuxtjs/supabase >=1.3.1 Depends on vulnerable versions of @supabase/ssr node_modules/@nuxtjs/supabase

3 low severity vulnerabilities

To address all issues (including breaking changes), run: npm audit fix --force

Oct 16 '24 07:10 avi-agg

Could someone provide a solution for this issue? I am managing a production website.

Oct 21 '24 04:10 avi-agg

Is this repo still active?

@larbish @atinux @danielroe

Please help me!

Oct 26 '24 03:10 avi-agg

@avi-agg this is an upstream dependency from https://github.com/supabase/ssr. It looks like it will be fixed in v0.5.2.

Oct 28 '24 20:10 th1m0

I am still getting this error in my Nuxt project

@avi-agg this is an upstream dependency from https://github.com/supabase/ssr. It looks like it will be fixed in v0.5.2.

Oct 29 '24 05:10 avi-agg

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

May 06 '25 13:05 github-actions[bot]