The nightly pnpm audit --audit-level=high found vulnerable
dependencies in the tree.
Run: https://github.com/iblai/os/actions/runs/30237157958
βββββββββββββββββββββββ¬βββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β high β PostCSS: Path Traversal in Previous Source Map β
β β Auto-Loading (sourceMappingURL) leads to Arbitrary β
β β .map File Disclosure β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Package β postcss β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Vulnerable versions β <=8.5.17 β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Patched versions β >=8.5.18 β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Paths β .>postcss β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β More info β https://github.com/advisories/GHSA-r28c-9q8g-f849 β
βββββββββββββββββββββββ΄βββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββββββββββββββββββββββ¬βββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β high β brace-expansion: DoS via unbounded expansion length β
β β causing an out-of-memory process crash β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Package β brace-expansion β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Vulnerable versions β <=5.0.7 β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Patched versions β >=5.0.8 β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Paths β .>@eslint/eslintrc>minimatch>brace-expansion β
β β β
β β .>@vitest/coverage-istanbul>test- β
β β exclude>glob>minimatch>brace-expansion β
βββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β More info β https://github.com/advisories/GHSA-mh99-v99m-4gvg β
βββββββββββββββββββββββ΄βββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
5 vulnerabilities found
Severity: 1 low | 1 moderate | 3 high
The nightly
pnpm audit --audit-level=highfound vulnerabledependencies in the tree.
Run: https://github.com/iblai/os/actions/runs/30237157958