通过 React native 上的解析方法在 JSON5 中的原型污染

问题描述 投票:0回答:0

你好,我在我的原生 React 应用程序项目中遇到了这个错误 当我执行时:npm audit

# npm audit report
json5  <1.0.2
Severity: high
Prototype Pollution in JSON5 via Parse Method - https://github.com/advisories/GHSA-9c47-m6qq-7p4h
fix available via `npm audit fix`
node_modules/find-babel-config/node_modules/json5
  find-babel-config  <=1.2.0
  Depends on vulnerable versions of json5
  node_modules/find-babel-config
    babel-plugin-module-resolver  2.3.0 - 4.1.0
    Depends on vulnerable versions of find-babel-config
    node_modules/babel-plugin-module-resolver
      babel-preset-expo  *
      Depends on vulnerable versions of babel-plugin-module-resolver
      node_modules/babel-preset-expo
        expo  >=14.0.0
        Depends on vulnerable versions of babel-preset-expo
        node_modules/expo


5 high severity vulnerabilities

我可以执行 npm audit fix --force 但我想看看问题出在哪里

我尝试更新组件并单击提供给我的链接以了解问题的来源,但它仍然存在

javascript node.js react-native expo json5
© www.soinside.com 2019 - 2024. All rights reserved.