Skip to content

Commit 974a164

Browse files
committed
Update version number
1 parent 0ffd953 commit 974a164

File tree

3 files changed

+9
-68
lines changed

3 files changed

+9
-68
lines changed

audit.js

100644100755
File mode changed.

package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "auditjs",
3-
"version": "2.2.0",
3+
"version": "2.2.2",
44
"description": "Audit dependencies to identify known vulnerabilities and maintenance problems",
55
"main": "audit-package.js",
66
"bin": {

test_data/expected_reports/bower.xml

+8-67
Original file line numberDiff line numberDiff line change
@@ -1,78 +1,19 @@
11
<?xml version="1.0" encoding="UTF-8"?>
2-
<testsuite name="auditjs.security.bower" errors="0" tests="1" package="test" id="" skipped="0" failures="1"><testcase name="angular"><failure message="Found 5 vulnerabilities. See stacktrace for details.">Details:
2+
<testsuite name="auditjs.security.bower" errors="0" tests="1" package="test" id="" skipped="0" failures="1"><testcase name="vor-test-project-bower-please-ignore-1"><failure message="Found 1 vulnerabilities. See stacktrace for details.">Details:
33

44
[
55
{
6-
"id": 8398878757,
7-
"title": "Cross Site Scripting (XSS) in JSONP",
8-
"description": "JSONP allows untrusted resource URLs, which provides a vector for attack by malicious actors.",
6+
"id": 8402907551,
7+
"title": "Test vulnerability, please ignore",
8+
"description": "This is a test vulnerability for a test project",
99
"versions": [
10-
"&lt;1.6.0-rc.0"
10+
"&lt;=2.0.0"
1111
],
1212
"references": [
13-
"https://github.com/angular/angular.js/commit/6476af83cd0418c84e034a955b12a842794385c4",
14-
"https://github.com/angular/angular.js/issues/11352"
13+
"https://vorsecurity.com/3"
1514
],
16-
"published": 0,
17-
"updated": 1493261505026
18-
},
19-
{
20-
"id": 8399952532,
21-
"title": "Possible security hold with usemap attribute",
22-
"description": "The attribute usemap has been blacklisted as it can be used as a security exploit.",
23-
"versions": [
24-
"&lt;1.5.0-rc.2"
25-
],
26-
"references": [
27-
"https://github.com/angular/angular.js/blob/master/CHANGELOG.md#1"
28-
],
29-
"published": 1469727878777,
30-
"updated": 1469727878777
31-
},
32-
{
33-
"id": 8399952533,
34-
"title": "UI Redress Attack Through Improper Sanitization Of SVG Elements",
35-
"description": "angular is susceptible to UI redress attacks. The vulnerability is due to the lack of proper sanitisation of an html input string by stripping all potentially dangerous tokens. So, an attacker can place svg elements outside of the containing element, leading to rendering it over other elements on the page (example: a login link).",
36-
"versions": [
37-
"&lt;1.5.0-beta.2"
38-
],
39-
"references": [
40-
"https://github.com/angular/angular.js/commit/181fc567d873df065f1e84af7225deb70a8d2eb9",
41-
"https://github.com/angular/angular.js/pull/12524",
42-
"https://srcclr.com/security/ui-redress-attack-through-improper/javascript/s-2252"
43-
],
44-
"published": 1469728183493,
45-
"updated": 1469728183493
46-
},
47-
{
48-
"id": 8399952534,
49-
"title": "Arbitrary Code Execution",
50-
"description": "SVG animations tags are not being sanitized properly, resulting in possible arbitrary code execution.",
51-
"versions": [
52-
"&lt;1.5.0-beta.2"
53-
],
54-
"references": [
55-
"https://cwe.mitre.org/data/definitions/78.html",
56-
"https://github.com/angular/angular.js/commit/67688d5ca00f6de4c7fe6084e2fa762a00d25610",
57-
"https://github.com/angular/angular.js/pull/11290",
58-
"https://srcclr.com/security/arbitrary-code-execution-through-svg/javascript/s-2253"
59-
],
60-
"published": 1469728274567,
61-
"updated": 1486325942923
62-
},
63-
{
64-
"id": 8402281303,
65-
"title": "Cross Site Scripting (XSS) through use elements referencing external SVG",
66-
"description": "> The use element can reference external svg's (same origin) and can include\nxlink javascript urls or foreign object that can execute xss.\n> \n> -- [github.com](https://github.com/angular/angular.js/pull/13453)",
67-
"versions": [
68-
"&lt;1.5.0"
69-
],
70-
"references": [
71-
"https://cwe.mitre.org/data/definitions/79.html",
72-
"https://github.com/angular/angular.js/issues/13453"
73-
],
74-
"published": 1483077792740,
75-
"updated": 1483078107273
15+
"published": 1493874212256,
16+
"updated": 1493874464883
7617
}
7718
]
7819

0 commit comments

Comments
 (0)