Vulnerability
it says run npm audit fix to fix 4 low severity vulnerabilities but it doesnt fix it
npm audit report
undici <=5.28.3
Undici proxy-authorization header not cleared on cross-origin redirect in fetch - https://github.com/advisories/GHSA-3787-6prv-h9w3
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline - https://github.com/advisories/GHSA-m4v8-wqvr-p9f7
Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect - https://github.com/advisories/GHSA-9qxr-qj54-h672
fix available via
npm audit fix
node_modules/undici
@discordjs/rest 2.0.1-dev.1690848847-1af7e5a0b.0 - 2.3.0-dev.1707178154-3755e66d4
Depends on vulnerable versions of undici
node_modules/@discordjs/rest
@discordjs/ws >=1.0.1-dev.1690848792-1af7e5a0b.0
Depends on vulnerable versions of @discordjs/rest
node_modules/@discordjs/ws
discord.js 14.0.0-dev.1640779371.9cdc448 - 14.0.0-dev.1657757514-fe34f48 || 14.12.2-dev.1690891477-7295a3a94.0 - 14.15.0-dev.1713312606-6759f5b9c
Depends on vulnerable versions of @discordjs/rest
Depends on vulnerable versions of @discordjs/ws
Depends on vulnerable versions of undici
node_modules/discord.jsGitHub
CVE-2024-24758 - GitHub Advisory Database
Undici proxy-authorization header not cleared on cross-origin redirect in fetch
GitHub
CVE-2024-30260 - GitHub Advisory Database
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
GitHub
CVE-2024-30261 - GitHub Advisory Database
Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect
3 Replies
- What's your exact discord.js
npm list discord.js
and node node -v
version?
- Not a discord.js issue? Check out #other-js-ts.
- Consider reading #how-to-get-help to improve your question!
- Explain what exactly your issue is.
- Post the full error stack trace, not just the top part!
- Show your code!
- Issue solved? Press the button!
- ✅
Marked as resolved by OPi get that there are links to fix 3 but are they safe or something?
theres like patched versions but idk how to update