DoctorMcKay / node-steamcommunity

Interact with various interfaces on Steam Community from Node.js
https://dev.doctormckay.com/forum/8-node-steamcommunity/
MIT License
475 stars 128 forks source link

Fix npm audit security warnings; export CSteamUser #333

Open engshien opened 9 months ago

engshien commented 9 months ago

lodash.pick >=4.0.0 Severity: high Prototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gw fix available via npm audit fix --force Will install cheerio@1.0.0-rc.12, which is a breaking change node_modules/lodash.pick cheerio 0.19.0 - 1.0.0-rc.3 Depends on vulnerable versions of css-select Depends on vulnerable versions of lodash.pick node_modules/cheerio

nth-check <2.0.1 Severity: high Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr fix available via npm audit fix --force Will install cheerio@1.0.0-rc.12, which is a breaking change node_modules/nth-check css-select <=3.1.0 Depends on vulnerable versions of nth-check node_modules/css-select

request * Severity: moderate Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6 Depends on vulnerable versions of tough-cookie No fix available node_modules/request

tough-cookie <4.1.3 Severity: moderate tough-cookie Prototype Pollution vulnerability - https://github.com/advisories/GHSA-72xf-g2v4-qvf3 No fix available node_modules/tough-cookie

6 vulnerabilities (2 moderate, 4 high)