High Severity Vulnerbility in Rekit-core about rekit HOT 4 OPEN

Here is the output from a scan using Snyk:

Tested 1870 dependencies for known issues, found 19 issues, 21 vulnerable paths.

Issues with no direct upgrade or patch:
✗ Arbitrary File Write via Archive Extraction (Zip Slip) [Medium Severity][https://snyk.io/vuln/SNYK-JS-DECOMPRESS-557358] in [email protected]
introduced by [email protected] > [email protected] > [email protected] > [email protected]
No upgrade or patch available
✗ Arbitrary File Write via Archive Extraction (Zip Slip) [Medium Severity][https://snyk.io/vuln/SNYK-JS-DECOMPRESSTAR-559095] in [email protected]
introduced by [email protected] > [email protected] > [email protected] > [email protected] > [email protected] and 2 other path(s)
No upgrade or patch available
✗ Prototype Pollution [Medium Severity][https://snyk.io/vuln/SNYK-JS-DOTPROP-543489] in [email protected]
introduced by [email protected] > [email protected] > [email protected] > [email protected] > [email protected]
This issue was fixed in versions: 5.1.1
✗ Use After Free [High Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-535497] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Out-of-Bounds [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-535498] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ NULL Pointer Dereference [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-535502] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Out-of-bounds Read [High Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540956] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Out-of-bounds Read [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540958] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Uncontrolled Recursion [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540964] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ NULL Pointer Dereference [High Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540974] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Denial of Service (DoS) [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540978] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Denial of Service (DoS) [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540980] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Out-of-bounds Read [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540990] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ NULL Pointer Dereference [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540992] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ NULL Pointer Dereference [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540994] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Out-of-bounds Read [High Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540996] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Out-of-Bounds [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-540998] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Use After Free [High Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-541000] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available
✗ Out-of-bounds Read [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODESASS-541002] in [email protected]
introduced by [email protected] > [email protected]
No upgrade or patch available

Organization: nrydevopswatch
Package manager: npm
Target file: package-lock.json
Project name: blackbird-scanner
Open source: no
Project path: /home/rbruscoe/dev/blackbird-scanner
Licenses: enabled

Run snyk wizard to address these issues.

from rekit.

Hello, are you using rekit 2.x? For 3.x rekit-core is no longer a dependency of the projects.

from rekit.

I'm using Rekit 3.0.0 and I followed the instructions to build it on your README.md for a new project.

from rekit.

I just removed Rekit-Core 3.0.0 from the 'package.json'; deleted the 'package-lock.json' and the 'node_modules' folder. Then I did a fresh 'npm install' and tried to then do 'npm start' but it failed with several errors saying it could not find the 'rekit-core' dependency.

from rekit.