Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

express-generator app uses modules which have critical security vulnerabilities #6179

Open
RushilJalal opened this issue Nov 16, 2024 · 1 comment
Labels

Comments

@RushilJalal
Copy link

RushilJalal commented Nov 16, 2024

image

I created an app using express-generator and on running npm i i am told that some of the modules have high and several critical level security vulnerabilities.
I ran npm audit fix --force which still didn't fix the problem.
I referred https://stackoverflow.com/questions/57923270/vulnerabilities-problem-using-npm-install which asked to uninstall jade and install pug instead which fixed the issue.
I believe this should be inbuilt and the user should not be required to manually install pug.

@RushilJalal
Copy link
Author

Even after following https://stackoverflow.com/questions/57923270/vulnerabilities-problem-using-npm-install
On running npm start, I am greeted with
image
I would be grateful if someone could point me to the solution as I am completely new with express.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant