今天npm提示檢測到了兩個高危漏洞運行 npm audit fix進行修復,修復完成后提示有一個漏洞無法自動修復,需要手動審核運行 npm audit 得到以下安全報告: === npm audit security report ===
Manual Review
Some vulnerabilities require your attention to resolve
Visit https://go.npm.me/audit-guide for additional guidance
High Missing Origin Validation
Package webpack-dev-server
Patched in >=3.1.11
Dependency of vue-photo-preview
Path vue-photo-preview > webpack-dev-server
More info https://nodesecurity.io/advisories/725found 1 high severity vulnerability in 18322 scanned packages 1 vulnerability requires manual review. See the full report for details.這個就看不懂的,是webpack-dev-server的問題還是vue-photo-preview的問題呢?有沒有大神能解答一下,這個漏洞需要怎么處理?
npm漏洞修復 audit查看報告后怎樣處理?
德瑪西亞99
2019-03-07 16:52:07