Reader small image

You're reading from  Angular 6 for Enterprise-Ready Web Applications

Product typeBook
Published inMay 2018
Reading LevelIntermediate
PublisherPackt
ISBN-139781786462909
Edition1st Edition
Languages
Right arrow
Author (1)
Doguhan Uluca
Doguhan Uluca
author image
Doguhan Uluca

Doguhan Uluca is a Principal Fellow at Excella in Washington, D.C., where he leads strategic initiatives and delivers critical systems. He has technical expertise in usability, mobility, performance, scalability, cybersecurity, and architecture. He is the author of the Angular for Enterprise Application Development books, has spoken at over 30 conferences, and is an Angular GDE Alumni. Doguhan has delivered solutions for Silicon Valley startups, Fortune 50 companies, and the U.S. Federal Government, and he is passionate about contributing to open-source projects and teaching.
Read more about Doguhan Uluca

Right arrow

Addressing security vulnerabilities

Sometimes you will be notified about security vulnerabilities in certain packages, through blogs or if you're using GitHub, you may notice warning like this on your repository:

GitHub.com Vulnerability Scan

This is a specific issue that arose when my Angular application was on version 5.0.0 and my CLI version was on 1.5.0. If you review this dependency, you can see the dependent packages and get more detail on the issue.

GitHub.com Security Bulletin

In this case, the vulnerable version of handlebars, 1.3.0 is being caused by one of Angular 5.0 packages.

Further research on Angular's GitHub issues reveals that the issue is actually caused by @angular/cli version 1.5.0. The reference is https://github.com/angular/angular/issues/20654.

This was to try an update to the latest minor version update of Angular, Material or CLI, which in...

lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
Angular 6 for Enterprise-Ready Web Applications
Published in: May 2018Publisher: PacktISBN-13: 9781786462909

Author (1)

author image
Doguhan Uluca

Doguhan Uluca is a Principal Fellow at Excella in Washington, D.C., where he leads strategic initiatives and delivers critical systems. He has technical expertise in usability, mobility, performance, scalability, cybersecurity, and architecture. He is the author of the Angular for Enterprise Application Development books, has spoken at over 30 conferences, and is an Angular GDE Alumni. Doguhan has delivered solutions for Silicon Valley startups, Fortune 50 companies, and the U.S. Federal Government, and he is passionate about contributing to open-source projects and teaching.
Read more about Doguhan Uluca