[email protected] vulnerabilities
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Newbie friendliness
- 83/100
- Issue type
- Bug
- Clarity
- Clearly specified
- Activity status
- Active
- Tech stack
- javascript, node.js
Research direction
Start with the dependency entry at packages/dts-plugin/package.json#L74 and confirm which undici version is declared. Update it to the proposed 7.30.1, then check the package’s dependency resolution to confirm that version is used and the reported vulnerabilities are addressed.
Written by the indexing model from the issue text.
Description
Describe the bug
There are vulnerabilities in [email protected] used by dts-plugin package from @module-federation/core.
Findings:
Proposed fix: upgrade to version 7.30.1.
Reproduction
https://github.com/module-federation/core/blob/main/packages/dts-plugin/package.json#L74
Used Package Manager
npm
System Info
n/a
Validations
- Read the docs.
- Read the common issues list.
- Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
- Make sure this is a Module federation issue and not a framework-specific issue.
- The provided reproduction is a minimal reproducible example of the bug.
- Dominant language
- JavaScript
- Stars
- 2.7k
- Forks
- 441
- Avg merge
- 4d 6h
- Merged PRs (30d)
- 32
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from module-federation/core
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
module-federation/core#5202 · 8 reactions ·
Maintainers usually reply within 1 day
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
module-federation/core#5210 ·
Maintainers usually reply within 1 day
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
module-federation/core#5204 · 1 comment ·
Maintainers usually reply within 1 day
-
Container init deadlock with cyclic remotesPossibly taken @Noyabronok claimed this 10 days ago. Open
Difficulty 4/5 3-5 days Newbie friendliness 35/100
module-federation/core#5196 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
module-federation/core#5195 ·
Maintainers usually reply within 1 day
All issues in module-federation/core
Similar issues
-
frontend
Difficulty 2/5 1-3 hours Newbie friendliness 69/100
uoftblueprint/canada-basketball#79 ·
Maintainers usually reply within 1 day
-
New App Request
Difficulty 1/5 Under an hour Newbie friendliness 76/100
ThatGuySam/doesitarm#1126 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
lyswhut/lx-music-desktop#3026 ·
-
good first issue server
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 67/100
openstreetmap/iD#13054 ·
Maintainers usually reply within 1 day