High severity vulnerabilities when installing @xata.io/cli
Hi all, encountered 4 high severity vulnerabilities when I installed the CLI:
npm install @xata.io/cliadded 200 packages, changed 3 packages, and audited 1808 packages in 14s267 packages are looking for funding run `npm fund` for details4 high severity vulnerabilitiesTo address all issues, run: npm audit fixRun `npm audit` for details.
npm install @xata.io/cliadded 200 packages, changed 3 packages, and audited 1808 packages in 14s267 packages are looking for funding run `npm fund` for details4 high severity vulnerabilitiesTo address all issues, run: npm audit fixRun `npm audit` for details.
Ran
npm audit fix
npm audit fix
, then it got down to 3:
npm audit fixchanged 1 package, and audited 1808 packages in 5s267 packages are looking for funding run `npm fund` for details# npm audit reportlodash.pick >=4.0.0Severity: highPrototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gwfix available via `npm audit fix --force`Will install @xata.io/[email protected], which is a breaking changenode_modules/lodash.pick @xata.io/importer >=1.0.0 Depends on vulnerable versions of lodash.pick node_modules/@xata.io/importer @xata.io/cli >=0.13.0 Depends on vulnerable versions of @xata.io/importer node_modules/@xata.io/cli3 high severity vulnerabilitiesTo address all issues (including breaking changes), run: npm audit fix --force
npm audit fixchanged 1 package, and audited 1808 packages in 5s267 packages are looking for funding run `npm fund` for details# npm audit reportlodash.pick >=4.0.0Severity: highPrototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gwfix available via `npm audit fix --force`Will install @xata.io/[email protected], which is a breaking changenode_modules/lodash.pick @xata.io/importer >=1.0.0 Depends on vulnerable versions of lodash.pick node_modules/@xata.io/importer @xata.io/cli >=0.13.0 Depends on vulnerable versions of @xata.io/importer node_modules/@xata.io/cli3 high severity vulnerabilitiesTo address all issues (including breaking changes), run: npm audit fix --force
Forced a fix, and it got up to 17 (can't paste the output for some reason).
And then tried fixing and force fixing and it goes on in a loop.