Veracode SCA agent scanning engine ready Running the NPM scanner Scanning completed Found 1856 lines of code Processing results... Processing results complete

Summary Report
Scan ID                                        5415a029-b23c-45bc-b622-e1416735af19
Scan Date & Time                             Mar 10 2023 02:30PM UTC
Account type                                 ENTERPRISE
Scan engine                                    3.8.21 (latest 3.8.21)
Analysis time                                 70 seconds
User                                         runner
Project                                        /home/runner/work/nodegoat/nodegoat
Package Manager(s)                             NPM

Open-Source Libraries
Total Libraries                                970
Direct Libraries                             26
Transitive Libraries                         944
Vulnerable Libraries                         61
Third Party Code                             99.7%

Security
With Vulnerable Methods                        0
High Risk Vulnerabilities                     32
Medium Risk Vulnerabilities                    98
Low Risk Vulnerabilities                     3

Vulnerabilities - Public Data
CVE-2020-8116                                 High Risk     Prototype Pollution                                                            dot-prop 4.2.0
CVE-2022-37609                                 High Risk     Prototype Pollution                                                            js-beautify 1.10.2
CVE-2020-7788                                 High Risk     Prototype Pollution                                                            ini 1.3.5
CVE-2020-7788                                 High Risk     Prototype Pollution                                                            ini 1.3.4
CVE-2015-8858                                 High Risk     Regular Expression Denial Of Service (ReDoS)                                 uglify-js 2.4.24
CVE-2022-37598                                 High Risk     Prototype Pollution                                                            uglify-js 2.4.24
CVE-2017-16026                                 High Risk     Remote Memory Disclosure                                                     request 2.67.0
CVE-2017-16026                                 High Risk     Remote Memory Disclosure                                                     request 2.36.0
CVE-2020-7610                                 High Risk     Deserialization Of Untrusted Object                                            bson 1.0.9
CVE-2021-3807                                 High Risk     Regular Expression Denial Of Service (ReDoS)                                 ansi-regex 3.0.0
CVE-2022-37598                                 High Risk     Prototype Pollution                                                            uglify-js 2.7.0
CVE-2017-16042                                 High Risk     Remote Code Execution (RCE)                                                    growl 1.9.2
CVE-2016-2515                                 High Risk     Regular Expression Denial Of Service (ReDoS)                                 hawk 1.0.0
CVE-2021-44906                                 High Risk     Prototype Pollution                                                            minimist 1.2.0
CVE-2020-7774                                 High Risk     Prototype Pollution                                                            y18n 3.2.1
CVE-2018-16492                                 High Risk     Prototype Pollution                                                            extend 3.0.0
CVE-2020-28282                                 High Risk     Prototype Pollution                                                            getobject 0.1.0
CVE-2021-3918                                 High Risk     Prototype Pollution                                                            json-schema 0.2.3
CVE-2021-23369                                 High Risk     Prototype Pollution                                                            handlebars 4.0.5
CVE-2019-19919                                 High Risk     Prototype Pollution                                                            handlebars 4.0.5
CVE-2019-20922                                 High Risk     Denial Of Service (DoS)                                                        handlebars 4.0.5
CVE-2021-23383                                 High Risk     Prototype Pollution                                                            handlebars 4.0.5
CVE-2019-20922                                 High Risk     Regular Expression Denial Of Service (ReDoS)                                 handlebars 4.0.5
CVE-2015-8315                                 High Risk     Regular Expression Denial Of Service (ReDoS)                                 ms 0.7.1
CVE-2019-13173                                 Medium Risk     Arbitrary File Overwrite                                                     fstream 1.0.10
CVE-2022-1537                                 Medium Risk     Time-of-check To Time-of-Use (TOCTOU)                                         grunt 1.0.4
CVE-2020-7729                                 Medium Risk     Arbtirary Code Execution                                                     grunt 1.0.4
CVE-2020-7662                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 websocket-extensions 0.1.3
CVE-2022-29167                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 hawk 3.1.3
CVE-2018-1002204                             Medium Risk     Arbitrary File Write                                                         adm-zip 0.4.4
CVE-2020-7754                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 npm-user-validate 0.1.5
CVE-2016-10540                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 minimatch 0.3.0
CVE-2019-20149                                 Medium Risk     Prototype Pollution                                                            kind-of 6.0.2
CVE-2022-24999                                 Medium Risk     Denial Of Service (DoS)                                                        qs 6.7.0
CVE-2019-2391                                 Medium Risk     Information Disclosure                                                         bson 1.0.9
CVE-2021-43138                                 Medium Risk     Prototype Pollution                                                            async 2.6.3
CVE-2020-7608                                 Medium Risk     Prototype Pollution                                                            yargs-parser 2.4.1
CVE-2017-15010                                 Medium Risk     Regular Expression Denial Of Service (ReDoS) Via Parsing Cookies             tough-cookie 2.3.1
CVE-2017-16028                                 Medium Risk     Cryptographically Insecure Token Generation                                    randomatic 1.1.5
CVE-2021-23358                                 Medium Risk     Arbitrary Code Execution                                                     underscore 1.8.3
CVE-2022-29167                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 hawk 1.0.0
CVE-2018-1109                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 braces 1.8.5
CVE-2022-38900                                 Medium Risk     Denial Of Service (DoS)                                                        decode-uri-component 0.2.0
CVE-2018-3737                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 sshpk 1.10.1
CVE-2020-7598                                 Medium Risk     Prototype Pollution                                                            minimist 1.2.0
CVE-2018-1107                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 is-my-json-valid 2.15.0
CVE-2021-33623                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 trim-newlines 1.0.0
CVE-2017-1000048                             Medium Risk     Prototype Override Protection Bypass                                         qs 6.2.1
CVE-2022-24999                                 Medium Risk     Denial Of Service (DoS)                                                        qs 6.2.1
CVE-2020-8244                                 Medium Risk     Denial Of Service (DoS)                                                        bl 1.1.2
CVE-2021-3820                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 i 0.3.6
CVE-2021-23343                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 path-parse 1.0.6
CVE-2014-7191                                 Medium Risk     Denial Of Service (DoS) Memory Consumption                                     qs 0.6.6
CVE-2014-10064                                 Medium Risk     Denial Of Service (DoS)                                                        qs 0.6.6
CVE-2017-16137                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 debug 2.2.0
CVE-2017-20165                                 Medium Risk     Regular Expression Denial Of Service                                         debug 2.2.0
CVE-2019-10795                                 Medium Risk     Prototype Pollution                                                            undefsafe 2.0.2
CVE-2020-8244                                 Medium Risk     Denial Of Service (DoS)                                                        bl 1.0.3
CVE-2017-1000048                             Medium Risk     Prototype Override Protection Bypass                                         qs 5.2.1
CVE-2022-24999                                 Medium Risk     Denial Of Service (DoS)                                                        qs 5.2.1
CVE-2018-20834                                 Medium Risk     Arbitrary File Overwrite                                                     tar 2.2.1
CVE-2018-3728                                 Medium Risk     Prototype Pollution                                                            hoek 2.16.3
CVE-2019-16776                                 Medium Risk     Arbitrary File Overwrite                                                     npm 3.10.10
CVE-2019-16777                                 Medium Risk     Arbitrary File Overwrite                                                     npm 3.10.10
CVE-2019-16775                                 Medium Risk     Unauthorized File Access                                                     npm 3.10.10
CVE-2019-20920                                 Medium Risk     Arbitrary Code Execution                                                     handlebars 4.0.5
CVE-2020-7598                                 Medium Risk     Prototype Pollution                                                            minimist 0.0.10
CVE-2019-1010266                             Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 lodash 4.13.1
CVE-2018-3721                                 Medium Risk     Prototype Pollution                                                            lodash 4.13.1
CVE-2018-16487                                 Medium Risk     Prototype Pollution Attack                                                     lodash 4.13.1
CVE-2021-23337                                 Medium Risk     Command Injection                                                             lodash 4.13.1
CVE-2019-10744                                 Medium Risk     Prototype Pollution                                                            lodash 4.13.1
CVE-2020-28500                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 lodash 4.13.1
CVE-2020-7598                                 Medium Risk     Prototype Pollution                                                            minimist 0.0.8
CVE-2021-23343                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 path-parse 1.0.5
CVE-2021-23358                                 Medium Risk     Arbitrary Code Execution                                                     underscore 1.9.2
CVE-2017-16138                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 mime 1.2.11
CVE-2017-16115                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 timespan 2.3.0
CVE-2018-3721                                 Medium Risk     Prototype Pollution                                                            lodash 2.4.2
CVE-2018-16487                                 Medium Risk     Prototype Pollution Attack                                                     lodash 2.4.2
CVE-2021-23337                                 Medium Risk     Command Injection                                                             lodash 2.4.2
CVE-2019-10744                                 Medium Risk     Prototype Pollution                                                            lodash 2.4.2
CVE-2018-21270                                 Medium Risk     Out-of-Bounds Read                                                             stringstream 0.0.5
CVE-2017-18077                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 brace-expansion 1.1.6
CVE-2020-8203                                 Medium Risk     Prototype Pollution                                                            lodash 4.17.15
CVE-2021-23337                                 Medium Risk     Command Injection                                                             lodash 4.17.15
CVE-2020-28500                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 lodash 4.17.15
CVE-2022-21803                                 Medium Risk     Prototype Pollution                                                            nconf 0.6.9
CVE-2017-15010                                 Medium Risk     Regular Expression Denial Of Service (ReDoS) Via Parsing Cookies             tough-cookie 2.2.2
CVE-2016-1000232                             Medium Risk     Regular Expression Denial Of Service (ReDoS) Via Long String Of Semicolons     tough-cookie 2.2.2
CVE-2022-24999                                 Medium Risk     Denial Of Service (DoS)                                                        qs 6.3.2
CVE-2021-23362                                 Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 hosted-git-info 2.8.5
CVE-2022-0436                                 Low Risk        Path Traversal                                                                 grunt 1.0.4
CVE-2017-18869                                 Low Risk        Time Of Check To Time Of Use (TOCTOU)                                         chownr 1.0.1
CVE-2020-15095                                 Low Risk        Information Disclosure                                                         npm 3.10.10

Vulnerabilities - Premium Data
NO-CVE                                         High Risk     Privilege Escalation                                                         shelljs 0.3.0
NO-CVE                                         High Risk     Arbitrary Code Execution                                                     is-my-json-valid 2.15.0
NO-CVE                                         High Risk     Arbitrary Code Execution                                                     handlebars 4.0.5
NO-CVE                                         High Risk     Remote Code Execution (RCE)                                                    handlebars 4.0.5
NO-CVE                                         High Risk     Remote Code Execution                                                         handlebars 4.0.5
NO-CVE                                         High Risk     Arbitrary Code Execution                                                     js-yaml 3.6.1
NO-CVE                                         High Risk     Arbitrary Code Execution                                                     is-my-json-valid 2.20.0
NO-CVE                                         High Risk     Prototype Pollution                                                            unset-value 1.0.0
NO-CVE                                         Medium Risk     Insecure Cipher                                                                request 2.75.0
NO-CVE                                         Medium Risk     Prototype Pollution                                                            request 2.75.0
NO-CVE                                         Medium Risk     Uninitialized Buffer Allocation                                                utile 0.3.0
NO-CVE                                         Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 js-beautify 1.10.2
NO-CVE                                         Medium Risk     Denial Of Service (DoS)                                                        mongodb 2.2.36
NO-CVE                                         Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 mocha 2.5.3
NO-CVE                                         Medium Risk     Insecure Cipher                                                                request 2.67.0
NO-CVE                                         Medium Risk     Prototype Pollution                                                            request 2.67.0
NO-CVE                                         Medium Risk     Insecure Cipher                                                                request 2.36.0
NO-CVE                                         Medium Risk     Insecure Cipher                                                                request 2.79.0
NO-CVE                                         Medium Risk     Prototype Pollution                                                            request 2.79.0
NO-CVE                                         Medium Risk     Arbitrary Command Injection                                                    shelljs 0.3.0
NO-CVE                                         Medium Risk     Denial Of Service (DoS)                                                        ws 1.1.5
NO-CVE                                         Medium Risk     Regular Express Denial Of Service (ReDoS)                                     is-my-json-valid 2.15.0
NO-CVE                                         Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 is-my-json-valid 2.15.0
NO-CVE                                         Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 revalidator 0.1.8
NO-CVE                                         Medium Risk     Timing Attacks                                                                 http-signature 0.10.1
NO-CVE                                         Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 marked 0.3.9
NO-CVE                                         Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 marked 0.3.9
NO-CVE                                         Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 marked 0.3.9
NO-CVE                                         Medium Risk     Prototype Pollution                                                            handlebars 4.0.5
NO-CVE                                         Medium Risk     Denial Of Service (DoS)                                                        js-yaml 3.6.1
NO-CVE                                         Medium Risk     Uninitialized Buffer Allocation                                                utile 0.2.1
NO-CVE                                         Medium Risk     Code Injection                                                                 lodash 4.13.1
NO-CVE                                         Medium Risk     Regular Express Denial Of Service (ReDoS)                                     is-my-json-valid 2.20.0
NO-CVE                                         Medium Risk     Regular Expression Denial Of Service (ReDoS)                                 is-my-json-valid 2.20.0
NO-CVE                                         Medium Risk     Information Disclosure                                                         tunnel-agent 0.4.3
NO-CVE                                         Medium Risk     Code Injection                                                                 lodash 2.4.2
NO-CVE                                         Medium Risk     Denial Of Service (DoS)                                                        stringstream 0.0.5
NO-CVE                                         Medium Risk     Code Injection                                                                 lodash 4.17.15

Licenses
Unique Library Licenses                        16
Libraries Using GPL                            0
Libraries With High Risk License             1
Libraries With Medium Risk License             0
Libraries With Low Risk License                977
Libraries With Multiple Licenses             13
Libraries With Unassessable License            2
Libraries With Unrecognizable License         4

Issues
Issue ID     Issue Type         Severity    Description                                                                                     Library Name & Version In Use
171717229    Vulnerability     4.3         CVE-2018-1002204: Arbitrary File Write                                                         adm-zip 0.4.4
171717230    Vulnerability     7.8         CVE-2021-3807: Regular Expression Denial Of Service (ReDoS)                                     ansi-regex 3.0.0
171717231    Vulnerability     6.8         CVE-2021-43138: Prototype Pollution                                                             async 2.6.3
171717232    Vulnerability     6.4         CVE-2020-8244: Denial Of Service (DoS)                                                         bl 1.0.3
171717233    Vulnerability     6.4         CVE-2020-8244: Denial Of Service (DoS)                                                         bl 1.1.2
171717234    Vulnerability     5.0         CVE-2017-18077: Regular Expression Denial Of Service (ReDoS)                                    brace-expansion 1.1.6
171717985    Vulnerability     5.0         CVE-2018-1109: Regular Expression Denial Of Service (ReDoS)                                     braces 1.8.5
171717986    Vulnerability     7.5         CVE-2020-7610: Deserialization Of Untrusted Object                                             bson 1.0.9
171717987    Vulnerability     5.5         CVE-2019-2391: Information Disclosure                                                         bson 1.0.9
171717988    Vulnerability     1.9         CVE-2017-18869: Time Of Check To Time Of Use (TOCTOU)                                         chownr 1.0.1
171717989    Vulnerability     5.0         CVE-2017-20165: Regular Expression Denial Of Service                                            debug 2.2.0
171717990    Vulnerability     5.0         CVE-2017-16137: Regular Expression Denial Of Service (ReDoS)                                    debug 2.2.0
171717991    Vulnerability     5.0         CVE-2022-38900: Denial Of Service (DoS)                                                         decode-uri-component 0.2.0
171717992    Vulnerability     7.5         CVE-2020-8116: Prototype Pollution                                                             dot-prop 4.2.0
171717993    Vulnerability     7.5         CVE-2018-16492: Prototype Pollution                                                             extend 3.0.0
171717994    Vulnerability     6.4         CVE-2019-13173: Arbitrary File Overwrite                                                        fstream 1.0.10
171717995    Vulnerability     7.5         CVE-2020-28282: Prototype Pollution                                                             getobject 0.1.0
171717996    Vulnerability     7.5         CVE-2017-16042: Remote Code Execution (RCE)                                                     growl 1.9.2
171717997    Vulnerability     6.9         CVE-2022-1537: Time-of-check To Time-of-Use (TOCTOU)                                            grunt 1.0.4
171717998    Vulnerability     4.6         CVE-2020-7729: Arbtirary Code Execution                                                         grunt 1.0.4
171717999    Vulnerability     2.1         CVE-2022-0436: Path Traversal                                                                 grunt 1.0.4
171718000    Vulnerability     7.8         CVE-2019-20922: Denial Of Service (DoS)                                                         handlebars 4.0.5
171718001    Vulnerability     7.8         CVE-2019-20922: Regular Expression Denial Of Service (ReDoS)                                    handlebars 4.0.5
171718002    Vulnerability     7.5         CVE-2021-23383: Prototype Pollution                                                             handlebars 4.0.5
171718003    Vulnerability     7.5         NO-CVE: Remote Code Execution (RCE)                                                             handlebars 4.0.5
171718004    Vulnerability     7.5         CVE-2019-19919: Prototype Pollution                                                             handlebars 4.0.5
171718005    Vulnerability     7.5         NO-CVE: Remote Code Execution                                                                 handlebars 4.0.5
171718006    Vulnerability     7.5         CVE-2021-23369: Prototype Pollution                                                             handlebars 4.0.5
171718007    Vulnerability     7.5         NO-CVE: Arbitrary Code Execution                                                                handlebars 4.0.5
171718008    Vulnerability     6.8         CVE-2019-20920: Arbitrary Code Execution                                                        handlebars 4.0.5
171718009    Vulnerability     6.8         NO-CVE: Prototype Pollution                                                                     handlebars 4.0.5
171718010    Vulnerability     7.8         CVE-2016-2515: Regular Expression Denial Of Service (ReDoS)                                     hawk 1.0.0
171718011    Vulnerability     5.0         CVE-2022-29167: Regular Expression Denial Of Service (ReDoS)                                    hawk 1.0.0
171718012    Vulnerability     5.0         CVE-2022-29167: Regular Expression Denial Of Service (ReDoS)                                    hawk 3.1.3
171718013    Vulnerability     6.5         CVE-2018-3728: Prototype Pollution                                                             hoek 2.16.3
171718014    Vulnerability     5.0         CVE-2021-23362: Regular Expression Denial Of Service (ReDoS)                                    hosted-git-info 2.8.5
171718015    Vulnerability     5.0         NO-CVE: Timing Attacks                                                                         http-signature 0.10.1
171718016    Vulnerability     5.0         CVE-2021-3820: Regular Expression Denial Of Service (ReDoS)                                     i 0.3.6
171718017    Vulnerability     7.5         CVE-2020-7788: Prototype Pollution                                                             ini 1.3.4
171718018    Vulnerability     7.5         CVE-2020-7788: Prototype Pollution                                                             ini 1.3.5
171718019    Vulnerability     7.5         NO-CVE: Arbitrary Code Execution                                                                is-my-json-valid 2.15.0
171718020    Vulnerability     5.0         CVE-2018-1107: Regular Expression Denial Of Service (ReDoS)                                     is-my-json-valid 2.15.0
171718021    Vulnerability     5.0         NO-CVE: Regular Express Denial Of Service (ReDoS)                                             is-my-json-valid 2.15.0
171718022    Vulnerability     5.0         NO-CVE: Regular Expression Denial Of Service (ReDoS)                                            is-my-json-valid 2.15.0
171718023    Vulnerability     7.5         NO-CVE: Arbitrary Code Execution                                                                is-my-json-valid 2.20.0
171718024    Vulnerability     5.0         NO-CVE: Regular Expression Denial Of Service (ReDoS)                                            is-my-json-valid 2.20.0
171718025    Vulnerability     5.0         NO-CVE: Regular Express Denial Of Service (ReDoS)                                             is-my-json-valid 2.20.0
171718026    Vulnerability     7.5         CVE-2022-37609: Prototype Pollution                                                             js-beautify 1.10.2
171718027    Vulnerability     5.0         NO-CVE: Regular Expression Denial Of Service (ReDoS)                                            js-beautify 1.10.2
171718028    Vulnerability     10.0        NO-CVE: Arbitrary Code Execution                                                                js-yaml 3.6.1
171718029    Vulnerability     5.0         NO-CVE: Denial Of Service (DoS)                                                                 js-yaml 3.6.1
171718030    Vulnerability     7.5         CVE-2021-3918: Prototype Pollution                                                             json-schema 0.2.3
171718031    Vulnerability     5.0         CVE-2019-20149: Prototype Pollution                                                             kind-of 6.0.2
171718032    Vulnerability     6.8         CVE-2018-16487: Prototype Pollution Attack                                                     lodash 2.4.2
171718033    Vulnerability     6.8         NO-CVE: Code Injection                                                                         lodash 2.4.2
171718034    Vulnerability     6.5         CVE-2021-23337: Command Injection                                                             lodash 2.4.2
171718035    Vulnerability     6.4         CVE-2019-10744: Prototype Pollution                                                             lodash 2.4.2
171718036    Vulnerability     4.0         CVE-2018-3721: Prototype Pollution                                                             lodash 2.4.2
171718037    Vulnerability     6.8         NO-CVE: Code Injection                                                                         lodash 4.13.1
171718038    Vulnerability     6.8         CVE-2018-16487: Prototype Pollution Attack                                                     lodash 4.13.1
171718039    Vulnerability     6.5         CVE-2021-23337: Command Injection                                                             lodash 4.13.1
171718040    Vulnerability     6.4         CVE-2019-10744: Prototype Pollution                                                             lodash 4.13.1
171718041    Vulnerability     5.0         CVE-2020-28500: Regular Expression Denial Of Service (ReDoS)                                    lodash 4.13.1
171718042    Vulnerability     4.0         CVE-2018-3721: Prototype Pollution                                                             lodash 4.13.1
171718043    Vulnerability     4.0         CVE-2019-1010266: Regular Expression Denial Of Service (ReDoS)                                 lodash 4.13.1
171718044    Vulnerability     6.8         NO-CVE: Code Injection                                                                         lodash 4.17.15
171718045    Vulnerability     6.5         CVE-2021-23337: Command Injection                                                             lodash 4.17.15
171718046    Vulnerability     5.8         CVE-2020-8203: Prototype Pollution                                                             lodash 4.17.15
171718047    Vulnerability     5.0         CVE-2020-28500: Regular Expression Denial Of Service (ReDoS)                                    lodash 4.17.15
171718048    Vulnerability     5.0         NO-CVE: Regular Expression Denial Of Service (ReDoS)                                            marked 0.3.9
171718049    Vulnerability     5.0         NO-CVE: Regular Expression Denial Of Service (ReDoS)                                            marked 0.3.9
171718050    Vulnerability     5.0         NO-CVE: Regular Expression Denial Of Service (ReDoS)                                            marked 0.3.9
171718051    Vulnerability     5.0         CVE-2017-16138: Regular Expression Denial Of Service (ReDoS)                                    mime 1.2.11
171718052    Vulnerability     5.0         CVE-2016-10540: Regular Expression Denial Of Service (ReDoS)                                    minimatch 0.3.0
171718053    Vulnerability     6.8         CVE-2020-7598: Prototype Pollution                                                             minimist 0.0.10
171718054    Vulnerability     6.8         CVE-2020-7598: Prototype Pollution                                                             minimist 0.0.8
171718055    Vulnerability     7.5         CVE-2021-44906: Prototype Pollution                                                             minimist 1.2.0
171718056    Vulnerability     6.8         CVE-2020-7598: Prototype Pollution                                                             minimist 1.2.0
171718057    Vulnerability     5.0         NO-CVE: Regular Expression Denial Of Service (ReDoS)                                            mocha 2.5.3
171718058    Vulnerability     5.0         NO-CVE: Denial Of Service (DoS)                                                                 mongodb 2.2.36
171718059    Vulnerability     7.8         CVE-2015-8315: Regular Expression Denial Of Service (ReDoS)                                     ms 0.7.1
171718060    Vulnerability     5.0         CVE-2022-21803: Prototype Pollution                                                             nconf 0.6.9
171718061    Vulnerability     5.0         CVE-2020-7754: Regular Expression Denial Of Service (ReDoS)                                     npm-user-validate 0.1.5
171718062    Vulnerability     5.5         CVE-2019-16776: Arbitrary File Overwrite                                                        npm 3.10.10
171718063    Vulnerability     5.5         CVE-2019-16777: Arbitrary File Overwrite                                                        npm 3.10.10
171718064    Vulnerability     4.0         CVE-2019-16775: Unauthorized File Access                                                        npm 3.10.10
171718065    Vulnerability     1.9         CVE-2020-15095: Information Disclosure                                                         npm 3.10.10
171718066    Vulnerability     5.0         CVE-2021-23343: Regular Expression Denial Of Service (ReDoS)                                    path-parse 1.0.5
171718067    Vulnerability     5.0         CVE-2021-23343: Regular Expression Denial Of Service (ReDoS)                                    path-parse 1.0.6
171718068    Vulnerability     5.0         CVE-2014-7191: Denial of Service (DoS) Memory Consumption                                     qs 0.6.6
171718069    Vulnerability     5.0         CVE-2014-10064: Denial Of Service (DoS)                                                         qs 0.6.6
171718070    Vulnerability     5.0         CVE-2022-24999: Denial Of Service (DoS)                                                         qs 5.2.1
171718071    Vulnerability     5.0         CVE-2017-1000048: Prototype Override Protection Bypass                                         qs 5.2.1
171718072    Vulnerability     5.0         CVE-2017-1000048: Prototype Override Protection Bypass                                         qs 6.2.1
171718073    Vulnerability     5.0         CVE-2022-24999: Denial Of Service (DoS)                                                         qs 6.2.1
171718074    Vulnerability     5.0         CVE-2022-24999: Denial Of Service (DoS)                                                         qs 6.3.2
171718075    Vulnerability     5.0         CVE-2022-24999: Denial Of Service (DoS)                                                         qs 6.7.0
171718076    Vulnerability     5.0         CVE-2017-16028: Cryptographically Insecure Token Generation                                     randomatic 1.1.5
171718077    Vulnerability     7.1         CVE-2017-16026: Remote Memory Disclosure                                                        request 2.36.0
171718078    Vulnerability     4.3         NO-CVE: Insecure Cipher                                                                         request 2.36.0
171718079    Vulnerability     7.1         CVE-2017-16026: Remote Memory Disclosure                                                        request 2.67.0
171718080    Vulnerability     5.0         NO-CVE: Prototype Pollution                                                                     request 2.67.0
171718081    Vulnerability     4.3         NO-CVE: Insecure Cipher                                                                         request 2.67.0
171718082    Vulnerability     5.0         NO-CVE: Prototype Pollution                                                                     request 2.75.0
171718083    Vulnerability     4.3         NO-CVE: Insecure Cipher                                                                         request 2.75.0
171718084    Vulnerability     5.0         NO-CVE: Prototype Pollution                                                                     request 2.79.0
171718085    Vulnerability     4.3         NO-CVE: Insecure Cipher                                                                         request 2.79.0
171718086    Vulnerability     5.0         NO-CVE: Regular Expression Denial Of Service (ReDoS)                                            revalidator 0.1.8
171718087    Vulnerability     7.2         NO-CVE: Privilege Escalation                                                                    shelljs 0.3.0
171718088    Vulnerability     5.0         NO-CVE: Arbitrary Command Injection                                                             shelljs 0.3.0
171718089    Vulnerability     5.0         CVE-2018-3737: Regular Expression Denial Of Service (ReDoS)                                     sshpk 1.10.1
171718090    Vulnerability     6.4         NO-CVE: Denial Of Service (DoS)                                                                 stringstream 0.0.5
171718091    Vulnerability     5.8         CVE-2018-21270: Out-of-Bounds Read                                                             stringstream 0.0.5
171718092    Vulnerability     6.4         CVE-2018-20834: Arbitrary File Overwrite                                                        tar 2.2.1
171718093    Vulnerability     5.0         CVE-2017-16115: Regular Expression Denial Of Service (ReDoS)                                    timespan 2.3.0
171718094    Vulnerability     5.0         CVE-2016-1000232: Regular Expression Denial Of Service (ReDoS) Via Long String Of Semicolons    tough-cookie 2.2.2
171718095    Vulnerability     5.0         CVE-2017-15010: Regular Expression Denial Of Service (ReDoS) Via Parsing Cookies                tough-cookie 2.2.2
171718096    Vulnerability     5.0         CVE-2017-15010: Regular Expression Denial Of Service (ReDoS) Via Parsing Cookies                tough-cookie 2.3.1
171718097    Vulnerability     5.0         CVE-2021-33623: Regular Expression Denial Of Service (ReDoS)                                    trim-newlines 1.0.0
171718098    Vulnerability     4.3         NO-CVE: Information Disclosure                                                                 tunnel-agent 0.4.3
171718099    Vulnerability     7.8         CVE-2015-8858: Regular Expression Denial Of Service (ReDoS)                                     uglify-js 2.4.24
171718100    Vulnerability     7.5         CVE-2022-37598: Prototype Pollution                                                             uglify-js 2.4.24
171718101    Vulnerability     7.5         CVE-2022-37598: Prototype Pollution                                                             uglify-js 2.7.0
171718102    Vulnerability     6.5         CVE-2019-10795: Prototype Pollution                                                             undefsafe 2.0.2
171718103    Vulnerability     6.5         CVE-2021-23358: Arbitrary Code Execution                                                        underscore 1.8.3
171718104    Vulnerability     6.5         CVE-2021-23358: Arbitrary Code Execution                                                        underscore 1.9.2
171718105    Vulnerability     7.5         NO-CVE: Prototype Pollution                                                                     unset-value 1.0.0
171718106    Vulnerability     6.4         NO-CVE: Uninitialized Buffer Allocation                                                         utile 0.2.1
171718107    Vulnerability     6.4         NO-CVE: Uninitialized Buffer Allocation                                                         utile 0.3.0
171718108    Vulnerability     5.0         CVE-2020-7662: Regular Expression Denial Of Service (ReDoS)                                     websocket-extensions 0.1.3
171718109    Vulnerability     5.0         NO-CVE: Denial Of Service (DoS)                                                                 ws 1.1.5
171718110    Vulnerability     7.5         CVE-2020-7774: Prototype Pollution                                                             y18n 3.2.1
171718111    Vulnerability     4.6         CVE-2020-7608: Prototype Pollution                                                             yargs-parser 2.4.1
171718112    Outdated Library    3.0         Latest version at scan: 0.16.0                                                                 consolidate 0.14.5
171718113    Outdated Library    3.0         Latest version at scan: 1.11.0                                                                 csurf 1.10.0
171718114    Outdated Library    3.0         Latest version at scan: 1.17.3                                                                 express-session 1.17.0
171718115    Outdated Library    3.0         Latest version at scan: 5.0.0-beta.1                                                            express 4.17.1
171718116    Outdated Library    3.0         Latest version at scan: 4.0.3                                                                 forever 0.15.3
171718117    Outdated Library    3.0         Latest version at scan: 1.4.3                                                                 grunt-cli 1.3.2
171718118    Outdated Library    3.0         Latest version at scan: 3.0.0                                                                 grunt-concurrent 2.3.1
171718119    Outdated Library    3.0         Latest version at scan: 0.13.3                                                                 grunt-mocha-test 0.12.7
171718120    Outdated Library    3.0         Latest version at scan: 1.0.9                                                                 grunt-retire 0.3.12
171718121    Outdated Library    3.0         Latest version at scan: 6.0.1                                                                 helmet 2.3.0
171718122    Outdated Library    3.0         Latest version at scan: 4.2.12                                                                 marked 0.3.9
171718123    Outdated Library    3.0         Latest version at scan: 5.1.0                                                                 mongodb 2.2.36
171718124    Outdated Library    3.0         Latest version at scan: 4.8.1                                                                 selenium-webdriver 2.53.3
171718125    Outdated Library    3.0         Latest version at scan: 13.2.3                                                                 should 8.4.0
171718126    Outdated Library    3.0         Latest version at scan: 1.13.6                                                                 underscore 1.9.2
171718127    Outdated Library    3.0         Latest version at scan: 1.0.1                                                                 zaproxy 0.2.0
171718128    License             9.0         Library has High-Risk License                                                                 bcrypt-nodejs 0.0.3

Full Report Details                            https://sca.analysiscenter.veracode.com/teams/000t57Vx/scans/47449777