Skip to content

Conversation

alexrockhill
Copy link
Contributor

There's a security vulnerability from an outdated package, this fixes it

full-stack-fastapi-template/frontend$ npm install

added 58 packages, removed 1 package, and audited 342 packages in 1s

49 packages are looking for funding
  run `npm fund` for details

42 high severity vulnerabilities

To address all issues, run:
  npm audit fix

Run `npm audit` for details.

After

$ npm install

up to date, audited 349 packages in 591ms

49 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

@alexrockhill
Copy link
Contributor Author

@tiangolo maybe this is worth a minute to merge since it's supposed to be a high security vulnerability if you have a minute, thanks!

Comment on lines 1 to 6
{
"name": "full-stack-fastapi-template",
"lockfileVersion": 3,
"requires": true,
"packages": {}
}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you please explain why this file in the root directory is needed?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah sorry mistake!

@YuriiMotov YuriiMotov changed the title BUG: Fix security vulnerability ⬆️ Upgrade Node.js to v24, bump npm dependencies Sep 3, 2025
@github-actions github-actions bot added the conflicts Automatically generated when a PR has a merge conflict label Sep 7, 2025
Copy link
Contributor

github-actions bot commented Sep 7, 2025

This pull request has a merge conflict that needs to be resolved.

@alejsdev
Copy link
Member

alejsdev commented Sep 8, 2025

Hi @alexrockhill, thank you for your interest, but this has already been addressed in two other PRs. The warning should be gone by now! Given that, I'll close this PR. Thanks for your effort 🚀

@alejsdev alejsdev closed this Sep 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
conflicts Automatically generated when a PR has a merge conflict
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants