Openbravo Issue Tracking System - POS2
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0047411POS2Corepublic2021-07-19 12:592024-01-09 07:35
Reporteralostale 
Assigned ToTriage Platform Base 
PrioritynormalSeverityminorReproducibilityhave not tried
StatusclosedResolutionout of date 
PlatformOS5OS Version
Product Version 
Target VersionFixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0047411: npm audit reports issues for CRA
DescriptionWhen npm audit is executed, some issues are reported for CRA dependencies.

Transitory dependencies with those issues cannot be easily updated (without ejecting CRA) and it seems CRA's team is not planning to get those fixed claiming they are not exploitable [1].

[1] https://github.com/facebook/create-react-app/issues/11174 [^]
Steps To ReproduceRun npm audit in core2:

$ npm audit --production
...
found 8 vulnerabilities (6 moderate, 2 high) in 2010 scanned packages
  run `npm audit fix` to fix 2 of them.
  1 vulnerability requires semver-major dependency updates.
  5 vulnerabilities require manual review. See the full report for details.

Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
duplicate of defect 0053862 closed ablasco Update all npm libraries to their latest version RM-9106 
related to defect 0046777 closed platform Update package-lock.json to fix npm audit issues 
related to design defect 0047415 closed Triage Platform Base npm audit reports issues for Storybook 
related to defect 0047535 closed platform Update package-lock.json to fix npm audit issues 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2021-07-19 12:59alostaleNew Issue
2021-07-19 12:59alostaleAssigned To => Retail
2021-07-19 12:59alostaleTriggers an Emergency Pack => No
2021-07-19 12:59alostaleRelationship addedrelated to 0046777
2021-07-19 13:00alostaleDescription Updatedbug_revision_view_page.php?rev_id=22895#r22895
2021-07-20 07:00alostaleSteps to Reproduce Updatedbug_revision_view_page.php?rev_id=22899#r22899
2021-07-20 07:04alostaleRelationship addedrelated to 0047415
2021-08-11 16:26shuehnerRelationship addedrelated to 0047535
2021-10-18 11:26guilleaerAssigned ToRetail => platform
2021-10-18 11:26guilleaerStatusnew => acknowledged
2022-02-01 08:07alostaleAssigned Toplatform => Triage Platform Base
2024-01-09 07:35alostaleRelationship addedduplicate of 0053862
2024-01-09 07:35alostaleStatusacknowledged => scheduled
2024-01-09 07:35alostaleStatusscheduled => closed
2024-01-09 07:35alostaleResolutionopen => out of date

There are no notes attached to this issue.