Code Inspection: npm audit on export-isremotereporef - Githubissues

atomist / automation-client

Automation client for running command and events handlers against the Atomist API.

GNU General Public License v3.0

15 stars 16 forks source link

Code Inspection: npm audit on export-isremotereporef #580

Closed cdupuis closed 5 years ago

cdupuis commented 5 years ago

lodash:<4.17.12

(error) Prototype Pollution Update to version 4.17.12 or later. - CVE-2019-10744
- lodash:4.17.11:
- graphql-code-generator>graphql-codegen-core>graphql-toolkit>lodash
- graphql-codegen-core>graphql-toolkit>lodash
- graphql-codegen-typescript-client>graphql-codegen-core>graphql-toolkit>lodash
- graphql-codegen-typescript-client>graphql-codegen-plugin-helpers>graphql-codegen-core>graphql-toolkit>lodash
- graphql-codegen-typescript-client>graphql-codegen-typescript-common>graphql-codegen-plugin-helpers>graphql-codegen-core>graphql-toolkit>lodash
- graphql-codegen-typescript-common>graphql-codegen-plugin-helpers>graphql-codegen-core>graphql-toolkit>lodash
- graphql-codegen-typescript-server>graphql-codegen-typescript-common>graphql-codegen-plugin-helpers>graphql-codegen-core>graphql-toolkit>lodash
- graphql-codegen-typescript-client>graphql-codegen-typescript-common>graphql-codegen-core>graphql-toolkit>lodash
- graphql-codegen-typescript-common>graphql-codegen-core>graphql-toolkit>lodash
- graphql-codegen-typescript-server>graphql-codegen-typescript-common>graphql-codegen-core>graphql-toolkit>lodash
- graphql-code-generator>graphql-toolkit>lodash

marked:>=0.3.14 <0.6.2

(warn) Regular Expression Denial of Service Upgrade to version 0.6.2 or later.
- marked:0.4.0:
- typedoc>marked

marked:>=0.4.0 <0.7.0

(info) Regular Expression Denial of Service Upgrade to version 0.7.0 or later.
- marked:0.4.0:
- typedoc>marked

[atomist:code-inspection:export-isremotereporef=@atomist/atomist-sdm]

cdupuis commented 5 years ago

Issue closed because branch export-isremotereporef was deleted.