Skip to content

Update bootstrap and shards-ui packages to fix insecure version of bootstrap #33

Open
@sonisaurabh19

Description

@sonisaurabh19

Expected Behavior

npm audit should pass

Current Behavior

npm audit shows a vulnerability in 4.1.3:

npm audit report

bootstrap <3.4.1 || >=4.0.0 <4.3.1
Severity: moderate
Cross-Site Scripting - https://npmjs.com/advisories/891
No fix available
node_modules/shards-vue/node_modules/bootstrap
shards-ui 2.0.0 - 2.1.2
Depends on vulnerable versions of bootstrap
node_modules/shards-vue/node_modules/shards-ui
shards-vue *
Depends on vulnerable versions of shards-ui
node_modules/shards-vue

Steps to Reproduce

  1. Install shards-vue
  2. Run npm audit

Context (Environment)

Possible Solution

Upgrade bootstrap to >= 4.3.1
Upgrade shards-ui >= 3.0.0

Possible Implementation

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions