Skip to content

chore(npm): Fix NPM Audit Errors#95

Open
subinvarghesein wants to merge 1 commit intotgrosinger:mainfrom
subinvarghesein:fix/npm-audit-fix
Open

chore(npm): Fix NPM Audit Errors#95
subinvarghesein wants to merge 1 commit intotgrosinger:mainfrom
subinvarghesein:fix/npm-audit-fix

Conversation

@subinvarghesein
Copy link

# npm audit report

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/braces

cross-spawn  7.0.0 - 7.0.4
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275 fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/cross-spawn

micromatch  <4.0.8
Severity: moderate
Regular Expression Denial of Service (ReDoS) in micromatch - https://github.com/advisories/GHSA-952p-6rrq-rcjv fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/micromatch

nanoid  <3.3.8
Severity: moderate
Predictable results in nanoid generation when given non-integer values - https://github.com/advisories/GHSA-mwcw-c2x4-8c55 fix available via
up to date, audited 348 packages in 2s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
Will install mocha@10.8.2, which is outside the stated dependency range node_modules/nanoid
  mocha  8.2.0 - 10.5.2
  Depends on vulnerable versions of nanoid
  Depends on vulnerable versions of serialize-javascript
  node_modules/mocha

serialize-javascript  6.0.0 - 6.0.1
Severity: moderate
Cross-site Scripting (XSS) in serialize-javascript - https://github.com/advisories/GHSA-76p7-773f-r4q5 fix available via
up to date, audited 348 packages in 4s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
Will install mocha@10.8.2, which is outside the stated dependency range node_modules/serialize-javascript

6 vulnerabilities (4 moderate, 2 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues, run:
  npm audit fix --force

# npm audit report

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - GHSA-grv7-fg5c-xmjg
fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/braces

cross-spawn  7.0.0 - 7.0.4
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - GHSA-3xgq-45jj-v275
fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/cross-spawn

micromatch  <4.0.8
Severity: moderate
Regular Expression Denial of Service (ReDoS) in micromatch - GHSA-952p-6rrq-rcjv
fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/micromatch

nanoid  <3.3.8
Severity: moderate
Predictable results in nanoid generation when given non-integer values - GHSA-mwcw-c2x4-8c55
fix available via
up to date, audited 348 packages in 2s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
Will install mocha@10.8.2, which is outside the stated dependency range
node_modules/nanoid
  mocha  8.2.0 - 10.5.2
  Depends on vulnerable versions of nanoid
  Depends on vulnerable versions of serialize-javascript
  node_modules/mocha

serialize-javascript  6.0.0 - 6.0.1
Severity: moderate
Cross-site Scripting (XSS) in serialize-javascript - GHSA-76p7-773f-r4q5
fix available via
up to date, audited 348 packages in 4s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
Will install mocha@10.8.2, which is outside the stated dependency range
node_modules/serialize-javascript

6 vulnerabilities (4 moderate, 2 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues, run:
  npm audit fix --force
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant