Symfony - npm更新不修复漏洞

Question

我正在使用网站上的这本书学习Symfony，当我在cmd上打字时：

symfony部署

然后上面写着

Symfony Security Check Report
1 package has known vulnerabilities.

symfony/http-kernel (v5.0.11)
[CVE-2020-15094][]: Prevent RCE when calling untrusted remote with CachingHttpClient
[CVE-2020-15094]: https://symfony.com/cve-2020-15094
Note that this checker can only detect vulnerabilities that are referenced in the security advisories database.
Execute this command regularly to check the newly discovered vulnerabilities.

我该怎么解决这个问题？

Answer 1

只需更新软件包即可。

您可以在这里查看版本和报告中存在漏洞的版本：https://packagist.org/packages/symfony/http-kernel

composer更新symfony/http-内核