Skip to content

chore(npm): Fix NPM Audit Errors #95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

subinvarghesein
Copy link

# npm audit report

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/braces

cross-spawn  7.0.0 - 7.0.4
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275 fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/cross-spawn

micromatch  <4.0.8
Severity: moderate
Regular Expression Denial of Service (ReDoS) in micromatch - https://github.com/advisories/GHSA-952p-6rrq-rcjv fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/micromatch

nanoid  <3.3.8
Severity: moderate
Predictable results in nanoid generation when given non-integer values - https://github.com/advisories/GHSA-mwcw-c2x4-8c55 fix available via
up to date, audited 348 packages in 2s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
Will install [email protected], which is outside the stated dependency range node_modules/nanoid
  mocha  8.2.0 - 10.5.2
  Depends on vulnerable versions of nanoid
  Depends on vulnerable versions of serialize-javascript
  node_modules/mocha

serialize-javascript  6.0.0 - 6.0.1
Severity: moderate
Cross-site Scripting (XSS) in serialize-javascript - https://github.com/advisories/GHSA-76p7-773f-r4q5 fix available via
up to date, audited 348 packages in 4s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
Will install [email protected], which is outside the stated dependency range node_modules/serialize-javascript

6 vulnerabilities (4 moderate, 2 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues, run:
  npm audit fix --force

# npm audit report

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - GHSA-grv7-fg5c-xmjg
fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/braces

cross-spawn  7.0.0 - 7.0.4
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - GHSA-3xgq-45jj-v275
fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/cross-spawn

micromatch  <4.0.8
Severity: moderate
Regular Expression Denial of Service (ReDoS) in micromatch - GHSA-952p-6rrq-rcjv
fix available via
up to date, audited 348 packages in 1s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
node_modules/micromatch

nanoid  <3.3.8
Severity: moderate
Predictable results in nanoid generation when given non-integer values - GHSA-mwcw-c2x4-8c55
fix available via
up to date, audited 348 packages in 2s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
Will install [email protected], which is outside the stated dependency range
node_modules/nanoid
  mocha  8.2.0 - 10.5.2
  Depends on vulnerable versions of nanoid
  Depends on vulnerable versions of serialize-javascript
  node_modules/mocha

serialize-javascript  6.0.0 - 6.0.1
Severity: moderate
Cross-site Scripting (XSS) in serialize-javascript - GHSA-76p7-773f-r4q5
fix available via
up to date, audited 348 packages in 4s

102 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
Will install [email protected], which is outside the stated dependency range
node_modules/serialize-javascript

6 vulnerabilities (4 moderate, 2 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues, run:
  npm audit fix --force
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant