The recipesng6 from matthiee

matthiee / recipesng6 Goto Github PK

View Code? Open in Web Editor NEW

Angular 6 Recipe app with ASP.Net Core and EF.Core backend

JavaScript 0.96% TypeScript 33.08% HTML 10.80% CSS 0.22% C# 54.94%

recipesng6's People

Contributors

Watchers

recipesng6's Issues

Upgrade to ASP.Net Core 2.2.0

Once there is a stable release of ASP.Net Core 2.2.0 we need to upgrade it.

Fix vulnerabilities

We need to fix the vulnerabilities in this project.

PS D:\Source\Repos\RecipesNg6> npm audit

                       === npm audit security report ===


                                 Manual Review
             Some vulnerabilities require your attention to resolve

          Visit https://go.npm.me/audit-guide for additional guidance


  Moderate        Prototype pollution

  Package         hoek

  Patched in      > 4.2.0 < 5.0.0 || >= 5.0.3

  Dependency of   karma [dev]

  Path            karma > log4js > loggly > request > hawk > boom > hoek

  More info       https://nodesecurity.io/advisories/566


  Moderate        Prototype pollution

  Package         hoek

  Patched in      > 4.2.0 < 5.0.0 || >= 5.0.3

  Dependency of   karma [dev]

  Path            karma > log4js > loggly > request > hawk > cryptiles > boom
                  > hoek

  More info       https://nodesecurity.io/advisories/566


  Moderate        Prototype pollution

  Package         hoek

  Patched in      > 4.2.0 < 5.0.0 || >= 5.0.3

  Dependency of   karma [dev]

  Path            karma > log4js > loggly > request > hawk > hoek

  More info       https://nodesecurity.io/advisories/566


  Moderate        Prototype pollution

  Package         hoek

  Patched in      > 4.2.0 < 5.0.0 || >= 5.0.3

  Dependency of   karma [dev]

  Path            karma > log4js > loggly > request > hawk > sntp > hoek

  More info       https://nodesecurity.io/advisories/566


  Moderate        Memory Exposure

  Package         tunnel-agent

  Patched in      >=0.6.0

  Dependency of   karma [dev]

  Path            karma > log4js > loggly > request > tunnel-agent

  More info       https://nodesecurity.io/advisories/598


  Low             Regular Expression Denial of Service

  Package         timespan

  Patched in      No patch available

  Dependency of   karma [dev]

  Path            karma > log4js > loggly > timespan

  More info       https://nodesecurity.io/advisories/533

found 6 vulnerabilities (1 low, 5 moderate) in 25660 scanned packages
  6 vulnerabilities require manual review. See the full report for details.

Here is a list with all projects that we need to track in order to fix those vulnerabilities.