diff --git a/Dockerfile b/Dockerfile index 50ffb7d5a..a0d5094da 100644 --- a/Dockerfile +++ b/Dockerfile @@ -45,12 +45,10 @@ RUN npm install && \ npm audit fix && \ rm -f yarn.lock && \ yarn import && \ -# Commented the below line to avoid vulnerability in decompress package and -# audit only dependencies folder. Refer https://www.npmjs.com/advisories/1217. -# Pull request is already been send https://github.com/kevva/decompress/pull/73, -# once fixed we will uncomment it. +# Commented the below line to avoid vulnerability in lodash package. +# Refer https://www.npmjs.com/advisories/1523. +# Once fixed we will uncomment it. # yarn audit && \ - yarn audit --groups dependencies && \ rm -f package-lock.json && \ yarn run bundle && \ rm -rf node_modules \ diff --git a/Makefile b/Makefile index 89e9cb630..9fe2bbc73 100644 --- a/Makefile +++ b/Makefile @@ -28,12 +28,10 @@ install-node: cd web && npm audit fix rm -f web/yarn.lock cd web && yarn import -# Commented the below line to avoid vulnerability in decompress package and -# audit only dependencies folder. Refer https://www.npmjs.com/advisories/1217. -# Pull request is already been send https://github.com/kevva/decompress/pull/73, -# once fixed we will uncomment it. +# Commented the below line to avoid vulnerability in lodash package. +# Refer https://www.npmjs.com/advisories/1523. +# Once fixed we will uncomment it. # cd web && yarn audit - cd web && yarn audit --groups dependencies rm -f package-lock.json rm -f web/package-lock.json