Open github-actions[bot] opened 3 years ago
=== npm audit security report ===
# Run npm install --save-dev eslint@8.3.0 to resolve 2 vulnerabilities
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > table > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > table > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm install --save-dev lint-staged@12.1.2 to resolve 1 vulnerability
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ lint-staged [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ lint-staged > listr > listr-update-renderer > log-update > │
│ │ wrap-ansi > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm install --save-dev size-limit@7.0.3 to resolve 1 vulnerability
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ size-limit [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ size-limit > ora > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update ansi-regex --depth 3 to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ webpack-dev-server [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ webpack-dev-server > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update nth-check --depth 7 to resolve 3 vulnerabilities
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ css-minimizer-webpack-plugin [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ css-minimizer-webpack-plugin > cssnano > │
│ │ cssnano-preset-default > postcss-svgo > svgo > css-select > │
│ │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ enzyme [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ enzyme > cheerio > cheerio-select > css-select > nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ html-webpack-plugin [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ html-webpack-plugin > pretty-error > renderkid > css-select │
│ │ > nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update axios --depth 2 to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Incorrect Comparison in axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-cph5-m8f7-6c5x │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌──────────────────────────────────────────────────────────────────────────────┐
│ Manual Review │
│ Some vulnerabilities require your attention to resolve │
│ │
│ Visit https://go.npm.me/audit-guide for additional guidance │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > node-gyp > npmlog > gauge > wide-align > string-width │
│ │ > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > @npmcli/run-script > node-gyp > npmlog > gauge > │
│ │ wide-align > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > pacote > @npmcli/run-script > node-gyp > npmlog > │
│ │ gauge > wide-align > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > @npmcli/arborist > pacote > @npmcli/run-script > │
│ │ node-gyp > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > @npmcli/arborist > @npmcli/metavuln-calculator > │
│ │ pacote > @npmcli/run-script > node-gyp > npmlog > gauge > │
│ │ wide-align > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > libnpmexec > @npmcli/arborist > │
│ │ @npmcli/metavuln-calculator > pacote > @npmcli/run-script > │
│ │ node-gyp > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > cli-table3 > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > inquirer > string-width > strip-ansi > │
│ │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > wide-align > string-width > strip-ansi │
│ │ > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > node-gyp > npmlog > gauge > wide-align > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > inquirer > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > cliui > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > wrap-ansi > strip-ansi │
│ │ > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > wrap-ansi > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > cliui > │
│ │ wrap-ansi > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > string-width > strip-ansi > │
│ │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha-junit-reporter > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=2.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @svgr/webpack [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @svgr/webpack > @svgr/plugin-svgo > svgo > css-select > │
│ │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ json-schema is vulnerable to Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.4.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > request > http-signature > jsprim > json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-896r-f27r-55mw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ json-schema is vulnerable to Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.4.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > node-gyp > request > http-signature > jsprim > │
│ │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-896r-f27r-55mw │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 35 vulnerabilities (34 moderate, 1 high) in 2219 scanned packages
run `npm audit fix` to fix 5 of them.
4 vulnerabilities require semver-major dependency updates.
26 vulnerabilities require manual review. See the full report for details.
=== npm audit security report ===
# Run npm install --save-dev eslint@8.3.0 to resolve 2 vulnerabilities
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > table > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > table > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm install --save-dev lint-staged@12.1.2 to resolve 1 vulnerability
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ lint-staged [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ lint-staged > listr > listr-update-renderer > log-update > │
│ │ wrap-ansi > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm install --save-dev size-limit@7.0.3 to resolve 1 vulnerability
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ size-limit [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ size-limit > ora > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update ansi-regex --depth 3 to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ webpack-dev-server [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ webpack-dev-server > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update nth-check --depth 7 to resolve 3 vulnerabilities
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ css-minimizer-webpack-plugin [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ css-minimizer-webpack-plugin > cssnano > │
│ │ cssnano-preset-default > postcss-svgo > svgo > css-select > │
│ │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ enzyme [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ enzyme > cheerio > cheerio-select > css-select > nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ html-webpack-plugin [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ html-webpack-plugin > pretty-error > renderkid > css-select │
│ │ > nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update axios --depth 2 to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Incorrect Comparison in axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-cph5-m8f7-6c5x │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌──────────────────────────────────────────────────────────────────────────────┐
│ Manual Review │
│ Some vulnerabilities require your attention to resolve │
│ │
│ Visit https://go.npm.me/audit-guide for additional guidance │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > node-gyp > npmlog > gauge > wide-align > string-width │
│ │ > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > @npmcli/run-script > node-gyp > npmlog > gauge > │
│ │ wide-align > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > pacote > @npmcli/run-script > node-gyp > npmlog > │
│ │ gauge > wide-align > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > @npmcli/arborist > pacote > @npmcli/run-script > │
│ │ node-gyp > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > @npmcli/arborist > @npmcli/metavuln-calculator > │
│ │ pacote > @npmcli/run-script > node-gyp > npmlog > gauge > │
│ │ wide-align > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > libnpmexec > @npmcli/arborist > │
│ │ @npmcli/metavuln-calculator > pacote > @npmcli/run-script > │
│ │ node-gyp > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > cli-table3 > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > inquirer > string-width > strip-ansi > │
│ │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > wide-align > string-width > strip-ansi │
│ │ > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > node-gyp > npmlog > gauge > wide-align > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > inquirer > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > cliui > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > wrap-ansi > strip-ansi │
│ │ > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > wrap-ansi > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > cliui > │
│ │ wrap-ansi > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > string-width > strip-ansi > │
│ │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha-junit-reporter > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=2.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @svgr/webpack [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @svgr/webpack > @svgr/plugin-svgo > svgo > css-select > │
│ │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ json-schema is vulnerable to Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.4.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > request > http-signature > jsprim > json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-896r-f27r-55mw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ json-schema is vulnerable to Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.4.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > node-gyp > request > http-signature > jsprim > │
│ │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-896r-f27r-55mw │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 35 vulnerabilities (34 moderate, 1 high) in 2219 scanned packages
run `npm audit fix` to fix 5 of them.
4 vulnerabilities require semver-major dependency updates.
26 vulnerabilities require manual review. See the full report for details.
=== npm audit security report ===
# Run npm install --save-dev eslint@8.3.0 to resolve 2 vulnerabilities
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > table > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > table > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm install --save-dev lint-staged@12.1.2 to resolve 1 vulnerability
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ lint-staged [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ lint-staged > listr > listr-update-renderer > log-update > │
│ │ wrap-ansi > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm install --save-dev size-limit@7.0.3 to resolve 1 vulnerability
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ size-limit [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ size-limit > ora > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update ansi-regex --depth 3 to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ webpack-dev-server [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ webpack-dev-server > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update nth-check --depth 7 to resolve 3 vulnerabilities
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ css-minimizer-webpack-plugin [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ css-minimizer-webpack-plugin > cssnano > │
│ │ cssnano-preset-default > postcss-svgo > svgo > css-select > │
│ │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ enzyme [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ enzyme > cheerio > cheerio-select > css-select > nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ html-webpack-plugin [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ html-webpack-plugin > pretty-error > renderkid > css-select │
│ │ > nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update axios --depth 2 to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Incorrect Comparison in axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-cph5-m8f7-6c5x │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌──────────────────────────────────────────────────────────────────────────────┐
│ Manual Review │
│ Some vulnerabilities require your attention to resolve │
│ │
│ Visit https://go.npm.me/audit-guide for additional guidance │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > node-gyp > npmlog > gauge > wide-align > string-width │
│ │ > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > @npmcli/run-script > node-gyp > npmlog > gauge > │
│ │ wide-align > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > pacote > @npmcli/run-script > node-gyp > npmlog > │
│ │ gauge > wide-align > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > @npmcli/arborist > pacote > @npmcli/run-script > │
│ │ node-gyp > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > @npmcli/arborist > @npmcli/metavuln-calculator > │
│ │ pacote > @npmcli/run-script > node-gyp > npmlog > gauge > │
│ │ wide-align > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > libnpmexec > @npmcli/arborist > │
│ │ @npmcli/metavuln-calculator > pacote > @npmcli/run-script > │
│ │ node-gyp > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ npm │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ npm > cli-table3 > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > inquirer > string-width > strip-ansi > │
│ │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > wide-align > string-width > strip-ansi │
│ │ > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > node-gyp > npmlog > gauge > wide-align > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > inquirer > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > cliui > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > wrap-ansi > strip-ansi │
│ │ > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > wrap-ansi > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > cliui > │
│ │ wrap-ansi > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > string-width > strip-ansi > │
│ │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha-junit-reporter > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=2.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @svgr/webpack [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @svgr/webpack > @svgr/plugin-svgo > svgo > css-select > │
│ │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ json-schema is vulnerable to Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.4.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > request > http-signature > jsprim > json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-896r-f27r-55mw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ json-schema is vulnerable to Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.4.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > node-gyp > request > http-signature > jsprim > │
│ │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-896r-f27r-55mw │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 35 vulnerabilities (34 moderate, 1 high) in 2219 scanned packages
run `npm audit fix` to fix 5 of them.
4 vulnerabilities require semver-major dependency updates.
26 vulnerabilities require manual review. See the full report for details.
=== npm audit security report ===
# Run npm install --save-dev eslint@8.3.0 to resolve 2 vulnerabilities
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > table > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > table > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm install --save-dev lint-staged@12.1.2 to resolve 1 vulnerability
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ lint-staged [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ lint-staged > listr > listr-update-renderer > log-update > │
│ │ wrap-ansi > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm install --save-dev size-limit@7.0.3 to resolve 1 vulnerability
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ size-limit [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ size-limit > ora > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update ansi-regex --depth 3 to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ webpack-dev-server [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ webpack-dev-server > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update nth-check --depth 7 to resolve 3 vulnerabilities
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ css-minimizer-webpack-plugin [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ css-minimizer-webpack-plugin > cssnano > │
│ │ cssnano-preset-default > postcss-svgo > svgo > css-select > │
│ │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ enzyme [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ enzyme > cheerio > cheerio-select > css-select > nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ html-webpack-plugin [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ html-webpack-plugin > pretty-error > renderkid > css-select │
│ │ > nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
# Run npm update axios --depth 2 to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Incorrect Comparison in axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-cph5-m8f7-6c5x │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌──────────────────────────────────────────────────────────────────────────────┐
│ Manual Review │
│ Some vulnerabilities require your attention to resolve │
│ │
│ Visit https://go.npm.me/audit-guide for additional guidance │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > inquirer > string-width > strip-ansi > │
│ │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > wide-align > string-width > strip-ansi │
│ │ > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > npmlog > gauge > wide-align > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > node-gyp > npmlog > gauge > wide-align > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > inquirer > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > cliui > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > wrap-ansi > strip-ansi │
│ │ > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > cliui > wrap-ansi > │
│ │ string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > cliui > │
│ │ wrap-ansi > string-width > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs > string-width > strip-ansi > │
│ │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha > yargs-unparser > yargs > string-width > │
│ │ strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ codeceptjs [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ codeceptjs > mocha-junit-reporter > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in │
│ │ chalk/ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eslint > strip-ansi > ansi-regex │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93q8-gq69-wqmw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Inefficient Regular Expression Complexity in nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=2.0.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @svgr/webpack [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @svgr/webpack > @svgr/plugin-svgo > svgo > css-select > │
│ │ nth-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-rp65-9cf3-cjxr │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ json-schema is vulnerable to Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.4.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > request > http-signature > jsprim > json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-896r-f27r-55mw │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ json-schema is vulnerable to Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.4.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > node-gyp > request > http-signature > jsprim > │
│ │ json-schema │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-896r-f27r-55mw │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 27 vulnerabilities (26 moderate, 1 high) in 1997 scanned packages
run `npm audit fix` to fix 5 of them.
4 vulnerabilities require semver-major dependency updates.
18 vulnerabilities require manual review. See the full report for details.
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.3
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.1, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.1, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.1, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.3
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.3
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.3
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.3
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex 3.0.0 - 5.0.0 || 6.0.0
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/eslint/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/npm/node_modules/cli-table3/node_modules/ansi-regex
node_modules/npm/node_modules/string-width/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
node_modules/string-width/node_modules/ansi-regex
node_modules/table/node_modules/ansi-regex
node_modules/webpack-dev-server/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/npm/node_modules/string-width/node_modules/strip-ansi
node_modules/string-width/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/npm/node_modules/string-width
node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
fix available via `npm audit fix`
node_modules/axios
json-schema <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/json-schema
jsprim 0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
Depends on vulnerable versions of json-schema
node_modules/jsprim
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/cheerio-select/node_modules/nth-check
node_modules/nth-check
node_modules/postcss-svgo/node_modules/nth-check
node_modules/renderkid/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
25 vulnerabilities (24 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.1.2, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || >=3.0.3
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass >=4.14.1
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
22 moderate severity vulnerabilities
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.1.2, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
22 moderate severity vulnerabilities
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
22 moderate severity vulnerabilities
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.1.2, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.1.2, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
22 moderate severity vulnerabilities
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.1.2, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
node-forge <1.0.0
URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq
fix available via `npm audit fix --force`
Will install webpack-dev-server@2.4.5, which is a breaking change
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server >=2.5.0
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
28 vulnerabilities (3 low, 25 moderate)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
node-forge <1.0.0
URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
28 vulnerabilities (3 low, 25 moderate)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@4.0.1, which is a breaking change
node_modules/markdown-it
jsdoc >=3.6.0
Depends on vulnerable versions of markdown-it
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
jsdoc-to-markdown >=5.0.0-node12.1
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
node-forge <1.0.0
URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
33 vulnerabilities (3 low, 29 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@4.0.1, which is a breaking change
node_modules/markdown-it
jsdoc >=3.6.0
Depends on vulnerable versions of markdown-it
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
jsdoc-to-markdown >=5.0.0-node12.1
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
node-forge <1.0.0
URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
33 vulnerabilities (3 low, 29 moderate, 1 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.1.2, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/markdown-it
jsdoc >=3.2.0-dev
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
jsdoc >=3.2.0-dev
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
node-forge <1.0.0
URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
35 vulnerabilities (3 low, 27 moderate, 5 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/markdown-it
jsdoc >=3.2.0-dev
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
jsdoc >=3.2.0-dev
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
node-forge <1.0.0
URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
35 vulnerabilities (3 low, 27 moderate, 5 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/markdown-it
jsdoc >=3.2.0-dev
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
jsdoc >=3.2.0-dev
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
node-forge <1.0.0
URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
35 vulnerabilities (3 low, 27 moderate, 5 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.1.2, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/markdown-it
jsdoc >=3.2.0-dev
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
Depends on vulnerable versions of jsdoc-api
node_modules/jsdoc-to-markdown
jsdoc >=3.2.0-dev
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
jsdoc-api >=5.0.1
Depends on vulnerable versions of jsdoc
node_modules/jsdoc-api
node-forge <1.0.0
URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
35 vulnerabilities (3 low, 27 moderate, 5 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@1.3.9, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || >=2.0.2
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || >=2.0.0-alpha.0
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.0, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.1.2, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.1.2, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.1.0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.1 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install codeceptjs@2.0.0, which is a breaking change
node_modules/cliui/node_modules/ansi-regex
node_modules/inquirer/node_modules/ansi-regex
node_modules/inquirer/node_modules/string-width/node_modules/ansi-regex
node_modules/log-update/node_modules/ansi-regex
node_modules/mocha-junit-reporter/node_modules/ansi-regex
node_modules/wide-align/node_modules/ansi-regex
node_modules/wrap-ansi/node_modules/ansi-regex
node_modules/yargs-unparser/node_modules/ansi-regex
node_modules/yargs/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/cliui/node_modules/strip-ansi
node_modules/inquirer/node_modules/string-width/node_modules/strip-ansi
node_modules/inquirer/node_modules/strip-ansi
node_modules/log-update/node_modules/strip-ansi
node_modules/mocha-junit-reporter/node_modules/strip-ansi
node_modules/wide-align/node_modules/strip-ansi
node_modules/wrap-ansi/node_modules/strip-ansi
node_modules/yargs-unparser/node_modules/strip-ansi
node_modules/yargs/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/yargs
node_modules/yargs-unparser/node_modules/yargs
mocha 6.0.0-0 - 8.2.1
Depends on vulnerable versions of yargs
Depends on vulnerable versions of yargs-unparser
node_modules/mocha
codeceptjs >=2.0.1
Depends on vulnerable versions of inquirer
Depends on vulnerable versions of mocha
Depends on vulnerable versions of mocha-junit-reporter
node_modules/codeceptjs
sass-graph 2.2.5 || 3.0.3 - 3.0.5
Depends on vulnerable versions of yargs
node_modules/sass-graph
node-sass 4.14.1 - 7.0.0
Depends on vulnerable versions of sass-graph
node_modules/node-sass
yargs-unparser 1.5.0 - 1.6.4
Depends on vulnerable versions of yargs
node_modules/yargs-unparser
inquirer 3.2.0 - 7.0.4
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/inquirer
mocha-junit-reporter 1.17.0 - 2.0.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha-junit-reporter
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/cliui/node_modules/string-width
node_modules/inquirer/node_modules/string-width
node_modules/log-update/node_modules/string-width
node_modules/wide-align/node_modules/string-width
node_modules/wrap-ansi/node_modules/string-width
node_modules/yargs-unparser/node_modules/string-width
node_modules/yargs/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/log-update/node_modules/wrap-ansi
node_modules/wrap-ansi
log-update 2.1.0 - 3.4.0
Depends on vulnerable versions of wrap-ansi
node_modules/log-update
listr-update-renderer >=0.5.0
Depends on vulnerable versions of log-update
node_modules/listr-update-renderer
listr >=0.14.3
Depends on vulnerable versions of listr-update-renderer
node_modules/listr
lint-staged 9.0.0 - 10.1.7
Depends on vulnerable versions of listr
node_modules/lint-staged
follow-redirects <1.14.7
Severity: high
Exposure of sensitive information in follow-redirects - https://github.com/advisories/GHSA-74fj-2j2h-c42q
fix available via `npm audit fix`
node_modules/follow-redirects
markdown-it <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
marked <4.0.10
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install jsdoc-to-markdown@7.1.1, which is a breaking change
node_modules/jsdoc/node_modules/marked
node_modules/marked
dmd 0.3.7 - 0.3.17 || 2.0.2 - 6.0.0
Depends on vulnerable versions of marked
node_modules/dmd
jsdoc-to-markdown 0.6.0 - 0.6.4 || 2.0.0-alpha.0 - 6.0.1
Depends on vulnerable versions of dmd
node_modules/jsdoc-to-markdown
jsdoc 3.2.0-dev - 3.6.7
Depends on vulnerable versions of markdown-it
Depends on vulnerable versions of marked
node_modules/jsdoc
nanoid <3.1.31
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix --force`
Will install nanoid@3.2.0, which is a breaking change
node_modules/nanoid
node_modules/postcss/node_modules/nanoid
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
fix available via `npm audit fix`
node_modules/node-fetch
node-forge <1.0.0
Severity: moderate
Open Redirect in node-forge - https://github.com/advisories/GHSA-8fr3-hfg3-gpgp
fix available via `npm audit fix`
node_modules/node-forge
selfsigned 1.1.1 - 1.10.14
Depends on vulnerable versions of node-forge
node_modules/selfsigned
webpack-dev-server 2.5.0 - 4.7.2
Depends on vulnerable versions of selfsigned
node_modules/webpack-dev-server
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix --force`
Will install @svgr/webpack@6.2.1, which is a breaking change
node_modules/svgo/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/svgo/node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
@svgr/plugin-svgo <=5.5.0
Depends on vulnerable versions of svgo
node_modules/@svgr/plugin-svgo
@svgr/webpack 4.0.0 - 5.5.0
Depends on vulnerable versions of @svgr/plugin-svgo
node_modules/@svgr/webpack
postcss <8.2.13
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
fix available via `npm audit fix`
node_modules/@types/cssnano/node_modules/postcss
@types/cssnano <=4.0.1
Depends on vulnerable versions of postcss
node_modules/@types/cssnano
css-minimizer-webpack-plugin 3.2.0 - 3.3.0
Depends on vulnerable versions of @types/cssnano
node_modules/css-minimizer-webpack-plugin
36 vulnerabilities (30 moderate, 6 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force