After auditing my app a high vulnerability is detected in the package object-path
dependency of react-scripts
.
I tried to run an audit fix however I still got the issue 1 vulnerability requires manual review. See the full report for details.
.
I tried to fix it manually but react-scripts
is forcing the use of version 0.11.4
and I need to update it to version 0.11.5
to fix the vulnerability.
React version:
npm version: 6.14.8
current version of react-scripts: 3.4.3
react-scripts
sets the version of resolve-url-loader
to v3.1.1, the dependency has been updated in [email protected]
(PR). That is, react-scripts needs to update to bump the version of resolve-url-loader
.
Created this PR to bump the version: https://github.com/facebook/create-react-app/pull/9841
Let's discuss in https://github.com/facebook/create-react-app/issues/9842 of which this is a duplicate.
Most helpful comment
Created this PR to bump the version: https://github.com/facebook/create-react-app/pull/9841