how to fix postcss vulnerability in reactjs

user_9109515 0
Viewed 2302

Suddenly i got around 79 moderate vulnerabilities related to postcss package. One of them is :

  Moderate        Regular Expression Denial of Service                          

  Package         postcss                                                       

  Patched in      >=8.2.10                                                      

  Dependency of   react-scripts                                                 

  Path            react-scripts > resolve-url-loader > postcss                  

  More info       https://npmjs.com/advisories/1693

I tired running npm audit fix but these require manual review. Does anyone know how to fix these?

postcss npm reactjs node.js
1 Answers

You could wait for react-scripts to update their dependencies or as an alternative use "resolutions" in your package.json to overrule the version:

"resolutions": {
    "postcss": "^8.2.10"
}
user_26043560
Related