You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have a project in which karma-sonarqube-unit-reporter is a dev dependency. When executing the command yarn audit it reports a vulnerability due to this package. I believe this would also be the case if you use npm audit.
I have a project in which
karma-sonarqube-unit-reporter
is a dev dependency. When executing the commandyarn audit
it reports a vulnerability due to this package. I believe this would also be the case if you usenpm audit
.Below is the audit report:
Steps to regenerate:
karma-sonarqube-unit-reporter
as a dev dependency to a node based project. In my case it is an Angular 7.x project.yarn audit
Possible fix:
Upgrade
xmlbuilder
dependency from 3.1.0 to at least 4.2.1.The text was updated successfully, but these errors were encountered: