Home > Software design >  Vulnerability in NestJS 8.4.5
Vulnerability in NestJS 8.4.5

Time:05-31

Recently, when I run npm audit in my npm package, I receive the following error:

npm audit report

The problem seems to be in the dicer package which is a very popular package used by NestJS.

I searched the web for possible solutions but can't find any fixes. Has anyone been able to fix this yet?

Thanks in advance.

CodePudding user response:

Has anyone been able to fix this yet?

No, or at least not in a published form. A fix for the dicer bug is not available. The URL in the picture of the text you included says that.

NPM is offering to downgrade nestjs/core to a version that doesn't depend on it. That will fix the issue (although probably create others).

Looking at the Github page for dice shows a bug report where you can get upto date information about the state of any fix.

  • Related