React js app - high severity vulnerability - immer

user_11799947 0
Viewed 1788
  • After installed react-router-dom.
  • I saw that I had a vulnerability.
  • exactly that:

enter image description here

I didn't find much useful information for solve. Has anyone ever encountered this problem?

immer.js npm reactjs node.js
2 Answers

As a temp workaround until the third party packages update their dependencies to the newest immerjs version (>=8.0.1) you can use yarn resolutions to use the specified fixed immer version >=8.0.1:

updates in the package.json

"devDependencies": {
  "immer": "8.0.1",
},
"resolutions": {
  "immer": "8.0.1"
}

NOTE: Don't forget to run yarn install after these changes.

A npm equivalent is maybe npm-force-resolutions.

user_100360390

-Find immer into package-lock.json -Update version to 8.0.1 -Remove node_modules -run script npm i -Enjoy

user_152561560
Related