[jira] [Created] (SPARK-51546) npm vulnerabilities

["Yang Jie (Jira)" <ji...@apache.org>]

Yang Jie created SPARK-51546:
--------------------------------

             Summary: npm vulnerabilities
                 Key: SPARK-51546
                 URL: https://issues.apache.org/jira/browse/SPARK-51546
             Project: Spark
          Issue Type: Improvement
          Components: Tests
    Affects Versions: 4.1.0
            Reporter: Yang Jie


run `npm audit` in  ui-test dir:

 
{code:java}
# npm audit report


@babel/helpers  <7.26.10
Severity: moderate
Babel has inefficient RexExp complexity in generated code with .replace when transpiling named capturing groups - https://github.com/advisories/GHSA-968p-4wvh-cqc8
fix available via `npm audit fix`
node_modules/@babel/helpers


cross-spawn  7.0.0 - 7.0.4
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275
fix available via `npm audit fix`
node_modules/cross-spawn


micromatch  <4.0.8
Severity: moderate
Regular Expression Denial of Service (ReDoS) in micromatch - https://github.com/advisories/GHSA-952p-6rrq-rcjv
fix available via `npm audit fix`
node_modules/micromatch


3 vulnerabilities (2 moderate, 1 high)


To address all issues, run:
  npm audit fix{code}
 

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org