You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This task has dependencies on archiver and nock which have critical vulnerabilities.
Error logs
To get these error logs you can run npm audit from the Tasks\AzureRmWebAppDeploymentV3 directory:
PS D:\microsoft\azure-pipelines-tasks\Tasks\AzureRmWebAppDeploymentV3> npm audit
=== npm audit security report ===
# Run npm update lodash --depth 4 to resolve 5 vulnerabilities
High Command Injection
Package lodash
Dependency of archiver
Path archiver > archiver-utils > lodash
More info https://npmjs.com/advisories/1673
High Command Injection
Package lodash
Dependency of archiver
Path archiver > zip-stream > archiver-utils > lodash
More info https://npmjs.com/advisories/1673
High Command Injection
Package lodash
Dependency of archiver
Path archiver > async > lodash
More info https://npmjs.com/advisories/1673
High Command Injection
Package lodash
Dependency of archiver
Path archiver > lodash
More info https://npmjs.com/advisories/1673
High Command Injection
Package lodash
Dependency of archiver
Path archiver > zip-stream > lodash
More info https://npmjs.com/advisories/1673
To get these error logs you can run npm audit from the Tasks\AzureRmWebAppDeploymentV3\Tests directory:
PS D:\microsoft\azure-pipelines-tasks\Tasks\AzureRmWebAppDeploymentV3\Tests> npm audit
=== npm audit security report ===
# Run npm update lodash --depth 2 to resolve 5 vulnerabilities
Low Prototype Pollution
Package lodash
Dependency of nock [dev]
Path nock > lodash
More info https://npmjs.com/advisories/577
High Prototype Pollution
Package lodash
Dependency of nock [dev]
Path nock > lodash
More info https://npmjs.com/advisories/782
High Prototype Pollution
Package lodash
Dependency of nock [dev]
Path nock > lodash
More info https://npmjs.com/advisories/1065
Low Prototype Pollution
Package lodash
Dependency of nock [dev]
Path nock > lodash
More info https://npmjs.com/advisories/1523
High Command Injection
Package lodash
Dependency of nock [dev]
Path nock > lodash
More info https://npmjs.com/advisories/1673
The text was updated successfully, but these errors were encountered:
DenisRumyantsev
changed the title
[AzureRmWebAppDeploymentV3] update dependencies to bump the lodash version in the package-lock.json
[AzureRmWebAppDeploymentV3] Bump up version of lodash to resolve security alert
Oct 6, 2021
Task Name
AzureRmWebAppDeploymentV3
Issue Description
This task has dependencies on
archiver
andnock
which have critical vulnerabilities.Error logs
To get these error logs you can run
npm audit
from theTasks\AzureRmWebAppDeploymentV3
directory:To get these error logs you can run
npm audit
from theTasks\AzureRmWebAppDeploymentV3\Tests
directory:The text was updated successfully, but these errors were encountered: