cloned Mosh github game-hub repository and after npm install get the below error:
What do I need to fix the issue? any help is appreciated.
C:\Users\notzr\source\react\game-hub>npm audit
npm audit report
semver 6.0.0 - 6.3.0
Severity: moderate
semver vulnerable to Regular Expression Denial of Service - semver vulnerable to Regular Expression Denial of Service · CVE-2022-25883 · GitHub Advisory Database · GitHub
fix available via npm audit fix
node_modules/semver
vite 4.1.0 - 4.1.4
Severity: high
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//) - Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//) · CVE-2023-34092 · GitHub Advisory Database · GitHub
fix available via npm audit fix
node_modules/vite
2 vulnerabilities (1 moderate, 1 high)
Thanks,
Rod
C:\Users\notzr\source\react\game-hub>npm audit
npm audit report
semver 6.0.0 - 6.3.0
Severity: moderate
semver vulnerable to Regular Expression Denial of Service - semver vulnerable to Regular Expression Denial of Service · CVE-2022-25883 · GitHub Advisory Database · GitHub
fix available via npm audit fix
node_modules/semver
vite 4.1.0 - 4.1.4
Severity: high
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//) - Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//) · CVE-2023-34092 · GitHub Advisory Database · GitHub
fix available via npm audit fix
node_modules/vite
2 vulnerabilities (1 moderate, 1 high)
disregard ??
I guess running npm audit fix does the trick for this correct ??
To address all issues, run:
npm audit fix
C:\Users\notzr\source\react\game-hub>npm audit fix
changed 7 packages, and audited 247 packages in 3s
15 packages are looking for funding
run npm fund
for details
found 0 vulnerabilities