We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Is your feature request related to a problem? Please describe. The current @lhci/cli version depends on a vulnerable version of cookies:
@lhci/cli
cookies
└─ @lhci/cli@npm:0.14.0 (via npm:^0.14.0) ├─ @lhci/utils@npm:0.14.0 (via npm:0.14.0) │ └─ lighthouse@npm:12.1.0 (via npm:12.1.0) │ └─ @sentry/node@npm:6.19.7 (via npm:^6.17.4) │ └─ cookie@npm:0.4.2 (via npm:^0.4.1) ├─ express@npm:4.21.1 (via npm:^4.17.1) │ └─ cookie@npm:0.7.1 (via npm:0.7.1) └─ lighthouse@npm:12.1.0 (via npm:12.1.0)
Describe the solution you'd like We have to upgrade
lighthouse
12.2.2
@sentry/node
express
5.0.1
Describe alternatives you've considered
Additional context
The text was updated successfully, but these errors were encountered:
Related: #1058
Sorry, something went wrong.
express should be updated to >=4.21.2; the cookie issue has been resolved in 4.21.1
No branches or pull requests
Is your feature request related to a problem? Please describe.
The current
@lhci/cli
version depends on a vulnerable version ofcookies
:Describe the solution you'd like
We have to upgrade
lighthouse
to the latest version (12.2.2
) and@sentry/node
in version 7 that will vendors thecookies
dependencyexpress
tothe latest version (a version >= 4.21.2.5.0.1
)Describe alternatives you've considered
Additional context
The text was updated successfully, but these errors were encountered: