Several warnings for security problems
See original GitHub issueDescribe the bug
Github send an alert for security vulnerability after create a project due security risk, but after run yarn audit
several more problems appears generate the follow result
Environment
System: OS: macOS 10.14.5 CPU: (4) x64 Intel® Core™ i5-5257U CPU @ 2.70GHz Binaries: Node: 8.15.0 - ~/.nvm/versions/node/v8.15.0/bin/node Yarn: 1.16.0 - /usr/local/bin/yarn npm: 6.9.0 - ~/.nvm/versions/node/v8.15.0/bin/npm Browsers: Chrome: 75.0.3770.100 Firefox: Not Found Safari: 12.1.1 npmPackages: react: ^16.8.6 => 16.8.6 react-dom: ^16.8.6 => 16.8.6 react-scripts: 3.0.1 => 3.0.1 npmGlobalPackages: create-react-app: Not Found
Steps to reproduce
Basic upload a project to GitHub or run yarn audit in a brand new project
Expected behavior
No vulnerabilities alerts
Actual behavior
Severity: 12969 High vulnerabilities found
Reproducible demo
Issue Analytics
- State:
- Created 4 years ago
- Comments:12 (4 by maintainers)
Top Results From Across the Web
Alerts - CISA
Alerts provide timely information about current security issues, vulnerabilities, and exploits. Sign up to receive these technical alerts in your inbox or ...
Read more >Computer Security Warnings You Shouldn't Ignore
Threat detected. And here's the real doozy: A warning that your software has actually detected malware, a virus, or some other threat. The ......
Read more >The Problem with Your Computer's Security Warnings - Ideas42
Unfortunately, security warnings like these are disregarded every day, exposing vital technology to cyber-attacks such as viruses and malware. But this isn't ...
Read more >Harnessing the Challenges and Solutions to Improve Security ...
In general, security warnings can be grouped into five different types, i.e., dialog box systems, in-place systems, notification systems, ...
Read more >Manage warnings about unsafe sites - Google Chrome Help
You'll see a warning if the content you're trying to see is dangerous or deceptive. These sites are often called "phishing" or "malware"...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
That’s a bit annoying when using
yarn
though as there is noyarn audit fix
at the moment. But I suppose all will be fixed in good times.Hm, I thought we fixed this yesterday. Did you try recovering your dependencies? Can you confirm it’s still happening?