Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update [email protected] to [email protected] #10077

Open
rktyt opened this issue Oct 9, 2024 · 1 comment
Open

update [email protected] to [email protected] #10077

rktyt opened this issue Oct 9, 2024 · 1 comment

Comments

@rktyt
Copy link

rktyt commented Oct 9, 2024

Reproduction

npm audit

I have included this as a bug report because there is no PR yet and I could not find an appropriate place to list it.

System Info

Used Package Manager

npm

Expected Behavior

no audit report

Actual Behavior

# npm audit report

cookie  <0.7.0
cookie accepts cookie name, path, and domain with out of bounds characters - https://github.com/advisories/GHSA-pxg6-pf52-xh8x
No fix available
node_modules/cookie
  @remix-run/server-runtime  *
  Depends on vulnerable versions of cookie
  node_modules/@remix-run/server-runtime
    @remix-run/node  *
    Depends on vulnerable versions of @remix-run/server-runtime
    node_modules/@remix-run/node
@chohner
Copy link
Contributor

chohner commented Oct 10, 2024

To temporarily bump the transitive cookie dependency you can use an override in your package.json:

  "overrides": {
    "@remix-run/server-runtime": {
      "cookie": "^0.7.2"
    }
  }

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants