You’re offline. This is a read only version of the page.
Have anyone encountered this issue when I try to build a new PCF control then perform npm install, npm reports 2 moderate vulnerability?
Performing npm audit points to the glob parent under the pcf-scripts
Steps to recreate
pac version: 1.9.4
Have anyone resolved this?
Yes, I see the same results, but I don't see why you would be concerned: PCFs are not publicly facing sites when deployed: they are stored as a bundle in the webresources collection that has no directly accessible URL. There is no single url path that would render the PCF as a freestanding page, therefore there is no way to hit it with a ddos attack (and even if there were, the attack is on the powerapp that hosts it--not the pcf--and MSFT provides service protection limits to prevent such attacks), so the vulnerability identified is not valid for the way it will be deployed.
#1
WarrenBelz
94
Most Valuable Professional
#2
Michael E. Gernaey
72
Super User 2025 Season 1
#3
mmbr1606
71
Super User 2025 Season 1
Share
Report
All responses (
Answers (
