Skip to content

security: update glob dependency to v11+ to fix vulnerabilities #822

@tranthanhbinh2603

Description

@tranthanhbinh2603

Problem

The current version of archiver-utils depends on glob@10.5.0, which contains widely publicized security vulnerabilities and is no longer supported by the author.

Dependency Path

glob@10.5.0
└── archiver-utils@5.0.2
    └── archiver@7.0.1
        └── nitropack (Nuxt ecosystem)

Error Logs

npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities.

package.json file

{
	"name": "anhemmotor-store",
	"type": "module",
	"private": true,
	"scripts": {
		"build": "cross-env NODE_OPTIONS='--no-deprecation' nuxi build",
		"dev": "nuxt dev",
		"generate": "nuxt generate",
		"preview": "nuxt preview",
		"postinstall": "nuxt prepare",
		"lint": "eslint . --fix",
		"start": "node --env-file=.env .output/server/index.mjs"
	},
	"dependencies": {
		"@eslint/js": "^10.0.1",
		"@microsoft/fetch-event-source": "^2.0.1",
		"@nuxt/content": "^3.13.0",
		"@nuxt/eslint": "^1.15.2",
		"@nuxt/icon": "^2.2.1",
		"@nuxtjs/seo": "^5.1.3",
		"@pinia/nuxt": "^0.11.3",
		"@tailwindcss/vite": "^4.2.4",
		"@takumi-rs/core": "^1.1.2",
		"@tanstack/vue-query": "^5.100.5",
		"@tanstack/vue-query-devtools": "^6.1.24",
		"@vue/eslint-config-prettier": "^10.2.0",
		"axios": "^1.15.2",
		"better-sqlite3": "^12.9.0",
		"eslint": "^10.2.1",
		"eslint-plugin-vue": "~10.9.0",
		"nuxt": "^4.4.2",
		"pinia": "^3.0.4",
		"tailwindcss": "^4.2.4",
		"vite-svg-loader": "^5.1.1",
		"vue": "^3.5.33",
		"vue-router": "^5.0.6",
		"vue3-toastify": "^0.2.9"
	},
	"overrides": {
		"serialize-javascript": "^7.0.3"
	},
	"devDependencies": {
		"@iconify-json/fa6-regular": "^1.2.4",
		"@iconify-json/fa6-solid": "^1.2.4",
		"@nuxt/eslint-config": "^1.15.2",
		"cross-env": "^10.1.0"
	}
}

Suggested Change

Update the glob dependency in archiver-utils to at least ^11.0.0 or the latest stable version to resolve security warnings and ensure compatibility with modern Node.js environments.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions