在我的Azure管道中,我得到一个错误:
semver <7.5.2严重性:中度严重易受正则表达式拒绝服务攻击-https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
当我将semver
添加到package.json
中的分辨率时:
"resolutions": {
"semver": "7.5.2"
}
然后我在管道中得到另一个错误:
npm ERR! path /my-path-to/node_modules/semver/bin/semver
npm ERR! errno -2
npm ERR! enoent ENOENT: no such file or directory, chmod '/my-path-to/node_modules/semver/bin/semver'
npm ERR! enoent This is related to npm not being able to find a file.
npm ERR! enoent
我为什么要做?我知道我必须更新软件包,但我需要先添加功能。
当我执行npm outdated
时,我得到一个大列表:
Package Current Wanted Latest Location Depended by
@apollo/client 3.3.19 3.7.16 3.7.16 node_modules/@apollo/client myrepo
@babel/cli 7.14.3 7.22.5 7.22.5 node_modules/@babel/cli myrepo
@babel/core 7.14.3 7.22.5 7.22.5 node_modules/@babel/core myrepo
@babel/plugin-proposal-class-properties 7.13.0 7.18.6 7.18.6 node_modules/@babel/plugin-proposal-class-properties myrepo
@babel/plugin-proposal-object-rest-spread 7.14.2 7.20.7 7.20.7 node_modules/@babel/plugin-proposal-object-rest-spread myrepo
@babel/plugin-proposal-optional-chaining 7.14.2 7.21.0 7.21.0 node_modules/@babel/plugin-proposal-optional-chaining myrepo
@babel/plugin-transform-modules-commonjs 7.14.0 7.22.5 7.22.5 node_modules/@babel/plugin-transform-modules-commonjs myrepo
@babel/plugin-transform-runtime 7.14.3 7.22.5 7.22.5 node_modules/@babel/plugin-transform-runtime myrepo
@babel/preset-env 7.14.2 7.22.5 7.22.5 node_modules/@babel/preset-env myrepo
@babel/preset-flow 7.13.13 7.22.5 7.22.5 node_modules/@babel/preset-flow myrepo
@babel/preset-react 7.13.13 7.22.5 7.22.5 node_modules/@babel/preset-react myrepo
@babel/preset-typescript 7.13.0 7.22.5 7.22.5 node_modules/@babel/preset-typescript myrepo
@babel/register 7.13.16 7.22.5 7.22.5 node_modules/@babel/register myrepo
@brainhubeu/react-carousel 1.19.26 1.19.26 2.0.4 node_modules/@brainhubeu/react-carousel myrepo
@elastic/ecs-pino-format 0.1.0 0.1.0 1.3.0 node_modules/@elastic/ecs-pino-format myrepo
@emotion/babel-plugin 11.3.0 11.11.0 11.11.0 node_modules/@emotion/babel-plugin myrepo
@emotion/babel-preset-css-prop 11.2.0 11.11.0 11.11.0 node_modules/@emotion/babel-preset-css-prop myrepo
@emotion/jest 11.9.1 11.11.0 11.11.0 node_modules/@emotion/jest myrepo
@emotion/react 11.4.0 11.11.1 11.11.1 node_modules/@emotion/react myrepo
@emotion/styled 11.3.0 11.11.0 11.11.0 node_modules/@emotion/styled myrepo
@godaddy/terminus 4.8.0 4.12.0 4.12.0 node_modules/@godaddy/terminus myrepo
@graphql-codegen/cli 2.6.2 2.16.5 4.0.1 node_modules/@graphql-codegen/cli myrepo
@graphql-codegen/fragment-matcher 1.17.8 1.17.8 5.0.0 node_modules/@graphql-codegen/fragment-matcher myrepo
@graphql-codegen/typescript 2.4.8 2.8.8 4.0.1 node_modules/@graphql-codegen/typescript myrepo
@loadable/babel-plugin 5.13.2 5.15.3 5.15.3 node_modules/@loadable/babel-plugin myrepo
@loadable/component 5.15.0 5.15.3 5.15.3 node_modules/@loadable/component myrepo
@loadable/server 5.15.0 5.15.3 5.15.3 node_modules/@loadable/server myrepo
@loadable/webpack-plugin 5.15.0 5.15.2 5.15.2 node_modules/@loadable/webpack-plugin myrepo
@material-ui/core 4.11.4 4.12.4 4.12.4 node_modules/@material-ui/core myrepo
@material-ui/lab 4.0.0-alpha.60 4.0.0-alpha.61 4.0.0-alpha.61 node_modules/@material-ui/lab myrepo
@material-ui/styles 4.11.4 4.11.5 4.11.5 node_modules/@material-ui/styles myrepo
@my-reop/conventional-changelog 2.1.0 2.1.0 2.2.0 node_modules/@my-repo/conventional-changelog myrepo
@storybook/addon-actions 6.3.4 6.5.16 7.0.23 node_modules/@storybook/addon-actions myrepo
@storybook/addon-essentials 6.3.4 6.5.16 7.0.23 node_modules/@storybook/addon-essentials myrepo
@storybook/addon-links 6.3.4 6.5.16 7.0.23 node_modules/@storybook/addon-links myrepo
@storybook/react 6.4.22 6.5.16 7.0.23 node_modules/@storybook/react myrepo
@svgr/webpack 4.3.3 4.3.3 8.0.1 node_modules/@svgr/webpack myrepo
@testing-library/jest-dom 5.12.0 5.16.5 5.16.5 node_modules/@testing-library/jest-dom myrepo
@testing-library/react 9.5.0 9.5.0 14.0.0 node_modules/@testing-library/react myrepo
@types/body-parser 1.19.0 1.19.2 1.19.2 node_modules/@types/body-parser myrepo
@types/brainhubeu__react-carousel 1.15.0 1.15.0 2.0.5 node_modules/@types/brainhubeu__react-carousel myrepo
@types/cors 2.8.10 2.8.13 2.8.13 node_modules/@types/cors myrepo
@types/dotenv 6.1.1 6.1.1 8.2.0 node_modules/@types/dotenv myrepo
@types/express 4.17.13 4.17.17 4.17.17 node_modules/@types/express myrepo
@types/http-errors 1.8.0 1.8.2 2.0.1 node_modules/@types/http-errors myrepo
@types/isomorphic-fetch 0.0.35 0.0.35 0.0.36 node_modules/@types/isomorphic-fetch myrepo
@types/jest 27.0.0 27.5.2 29.5.2 node_modules/@types/jest myrepo
@types/loadable__component 5.13.3 5.13.4 5.13.4 node_modules/@types/loadable__component myrepo
@types/loadable__server 5.12.5 5.12.6 5.12.6 node_modules/@types/loadable__server myrepo
@types/lodash 4.14.169 4.14.195 4.14.195 node_modules/@types/lodash myrepo
@types/node 12.20.13 12.20.55 20.3.1 node_modules/@types/node myrepo
@types/pino 6.3.8 6.3.12 7.0.5 node_modules/@types/pino myrepo
@types/pino-http 5.4.1 5.8.1 5.8.1 node_modules/@types/pino-http myrepo
@types/react 17.0.6 17.0.62 18.2.13 node_modules/@types/react myrepo
@types/react-dom 17.0.5 17.0.20 18.2.6 node_modules/@types/react-dom myrepo
@types/react-lazyload 3.1.0 3.2.0 3.2.0 node_modules/@types/react-lazyload myrepo
@types/react-router 5.1.14 5.1.20 5.1.20 node_modules/@types/react-router myrepo
@types/react-router-config 5.0.2 5.0.7 5.0.7 node_modules/@types/react-router-config myrepo
@types/recompose 0.30.7 0.30.10 0.30.10 node_modules/@types/recompose myrepo
@types/serialize-javascript 5.0.1 5.0.2 5.0.2 node_modules/@types/serialize-javascript myrepo
@types/storybook__react 4.0.2 4.0.2 5.2.1 node_modules/@types/storybook__react myrepo
@types/storybook-addon-jsx 5.4.3 5.4.3 7.0.4 node_modules/@types/storybook-addon-jsx myrepo
@types/webpack-env 1.16.0 1.18.1 1.18.1 node_modules/@types/webpack-env myrepo
@types/yup 0.26.37 0.26.37 0.32.0 node_modules/@types/yup myrepo
@typescript-eslint/parser 2.34.0 2.34.0 5.60.0 node_modules/@typescript-eslint/parser myrepo
babel-jest 25.5.1 25.5.1 29.5.0 node_modules/babel-jest myrepo
babel-loader 8.2.2 8.3.0 9.1.2 node_modules/babel-loader myrepo
babel-plugin-macros 2.8.0 2.8.0 3.1.0 node_modules/babel-plugin-macros myrepo
babel-plugin-named-asset-import 0.3.7 0.3.8 0.3.8 node_modules/babel-plugin-named-asset-import myrepo
body-parser 1.20.0 1.20.2 1.20.2 node_modules/body-parser myrepo
chalk 2.4.2 2.4.2 5.2.0 node_modules/chalk myrepo
core-js 3.12.1 3.31.0 3.31.0 node_modules/core-js myrepo
cross-env 5.2.1 5.2.1 7.0.3 node_modules/cross-env myrepo
crypto-hash 1.3.0 1.3.0 2.0.1 node_modules/crypto-hash myrepo
css-loader 3.6.0 3.6.0 6.8.1 node_modules/css-loader myrepo
cypress 7.3.0 7.7.0 12.15.0 node_modules/cypress myrepo
cypress-cucumber-preprocessor 4.1.0 4.3.1 4.3.1 node_modules/cypress-cucumber-preprocessor myrepo
date-fns 2.21.3 2.30.0 2.30.0 node_modules/date-fns myrepo
dotenv 8.6.0 8.6.0 16.3.1 node_modules/dotenv myrepo
eslint-loader 3.0.4 3.0.4 4.0.2 node_modules/eslint-loader myrepo
express 4.18.1 4.18.2 4.18.2 node_modules/express myrepo
file-loader 4.3.0 4.3.0 6.2.0 node_modules/file-loader myrepo
formik 2.2.7 2.4.2 2.4.2 node_modules/formik myrepo
graphql 14.7.0 14.7.0 16.7.1 node_modules/graphql myrepo
history 4.10.1 4.10.1 5.3.0 node_modules/history myrepo
hpropagate 0.0.7 0.0.7 1.0.1 node_modules/hpropagate myrepo
html-react-parser 1.4.14 1.4.14 4.0.0 node_modules/html-react-parser myrepo
html-webpack-plugin 3.2.0 3.2.0 5.5.3 node_modules/html-webpack-plugin myrepo
http-errors 1.8.0 1.8.1 2.0.0 node_modules/http-errors myrepo
husky 3.1.0 3.1.0 8.0.3 node_modules/husky myrepo
is-mobile 2.2.2 2.2.2 4.0.0 node_modules/is-mobile myrepo
jest 25.5.4 25.5.4 29.5.0 node_modules/jest myrepo
jest-junit 8.0.0 8.0.0 16.0.0 node_modules/jest-junit myrepo
jsdom 15.1.1 15.1.1 22.1.0 node_modules/jsdom myrepo
lint-staged 9.5.0 9.5.0 13.2.2 node_modules/lint-staged myrepo
mini-css-extract-plugin 0.8.2 0.8.2 2.7.6 node_modules/mini-css-extract-plugin myrepo
nanoid 3.2.0 3.3.6 4.0.2 node_modules/nanoid myrepo
nodemon 2.0.7 2.0.22 2.0.22 node_modules/nodemon myrepo
pino 6.11.3 6.14.0 8.14.1 node_modules/pino myrepo
pino-http 5.5.0 5.8.0 8.3.3 node_modules/pino-http myrepo
pino-pretty 4.8.0 4.8.0 10.0.0 node_modules/pino-pretty myrepo
prettier 1.19.1 1.19.1 2.8.8 node_modules/prettier myrepo
puppeteer 1.20.0 1.20.0 20.7.3 node_modules/puppeteer myrepo
query-string 7.0.0 7.1.3 8.1.0 node_modules/query-string myrepo
react 17.0.2 17.0.2 18.2.0 node_modules/react myrepo
react-cookie 4.0.3 4.1.1 4.1.1 node_modules/react-cookie myrepo
react-dev-utils 11.0.4 11.0.4 12.0.1 node_modules/react-dev-utils myrepo
react-dom 17.0.2 17.0.2 18.2.0 node_modules/react-dom myrepo
react-helmet-async 1.0.9 1.3.0 1.3.0 node_modules/react-helmet-async myrepo
react-router 5.2.0 5.3.4 6.13.0 node_modules/react-router myrepo
react-router-dom 5.2.0 5.3.4 6.13.0 node_modules/react-router-dom myrepo
react-twitter-widgets 1.10.0 1.11.0 1.11.0 node_modules/react-twitter-widgets myrepo
regenerator-runtime 0.13.7 0.13.11 0.13.11 node_modules/regenerator-runtime myrepo
rimraf 3.0.2 3.0.2 5.0.1 node_modules/rimraf myrepo
serialize-javascript 6.0.0 6.0.1 6.0.1 node_modules/serialize-javascript myrepo
source-map-explorer 2.5.2 2.5.3 2.5.3 node_modules/source-map-explorer myrepo
start-server-and-test 1.12.2 1.15.4 2.0.0 node_modules/start-server-and-test myrepo
swiper 6.8.4 6.8.4 9.4.1 node_modules/swiper myrepo
terser-webpack-plugin 1.4.5 1.4.5 5.3.9 node_modules/terser-webpack-plugin myrepo
typescript 3.9.10 3.9.10 5.1.3 node_modules/typescript myrepo
url-loader 2.3.0 2.3.0 4.1.1 node_modules/url-loader myrepo
webpack 4.46.0 4.46.0 5.88.0 node_modules/webpack myrepo
webpack-cli 3.3.12 3.3.12 5.1.4 node_modules/webpack-cli myrepo
webpack-dev-server 3.11.3 3.11.3 4.15.1 node_modules/webpack-dev-server myrepo
webpack-hot-middleware 2.25.1 2.25.4 2.25.4 node_modules/webpack-hot-middleware myrepo
webpack-manifest-plugin 2.2.0 2.2.0 5.0.0 node_modules/webpack-manifest-plugin myrepo
webpack-merge 5.8.0 5.9.0 5.9.0 node_modules/webpack-merge myrepo
webpack-node-externals 1.7.2 1.7.2 3.0.0 node_modules/webpack-node-externals myrepo
yup 0.28.5 0.28.5 1.2.0 node_modules/yup myrepo
如何解决此问题?
1条答案
按热度按时间9udxz4iz1#
看起来有与Semver相关的中等漏洞。我和你有一样的 prop 。
https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
Semvr已更新至7.5.3:
enter link description here
无论如何。我发现我的问题,由于事实上调查日志从管道。所以更新到目标版本34对我来说很有效。
执行任务“:app:checkReleaseAarMetadata”失败。A failure occurred while executing com.android.build.gradle.internal.tasks.CheckAarMetadataWorkAction检查AAR元数据时发现问题:
(Note:由于声誉较低,我还不能添加评论:)