CODEWITHSUNDEEP
node.jsreactjsnpmimmer.js
andrei_bancos
andrei_bancos

Reputation: 69

React js app - high severity vulnerability - immer

enter image description here

I didn't find much useful information for solve. Has anyone ever encountered this problem?

Upvotes: 3

Views: 2082

Answers (2)

zerocewl
zerocewl

Reputation: 12804

As a temp workaround until the third party packages update their dependencies to the newest immerjs version (>=8.0.1) you can use yarn resolutions to use the specified fixed immer version >=8.0.1:

updates in the package.json

"devDependencies": {
  "immer": "8.0.1",
},
"resolutions": {
  "immer": "8.0.1"
}

NOTE: Don't forget to run yarn install after these changes.

A npm equivalent is maybe npm-force-resolutions.

Upvotes: 1

Javier Carreño
Javier Carreño

Reputation: 1

-Find immer into package-lock.json -Update version to 8.0.1 -Remove node_modules -run script npm i -Enjoy

Upvotes: 0

Related Questions