unexpected-ivoryU
Refine•3y ago•
9 replies
unexpected-ivory

3 high severity vulnerabilities

Recently we're tasked to look into vulnerabilities in the code. We find that the default project creation for refine already has 3 high severity vulnerabilities. We tried to update but it breaks the code. Is there anyone facing such issue?

Below is the result when I run npm audit

# npm audit report

marked  <=4.0.9
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-5v2h-r2cx-5xgj
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
No fix available
node_modules/marked
  ink-markdown  *
  Depends on vulnerable versions of marked
  node_modules/ink-markdown
    @refinedev/cli  *
    Depends on vulnerable versions of ink-markdown
    node_modules/@refinedev/cli

3 high severity vulnerabilities

Some issues need review, and may require choosing
a different dependency.
Was this page helpful?