Code Inspection: npm audit on master - Githubissues

atomist / sdm-pack-rcca-github

An Atomist extension pack to manage GitHub resources like Webhooks

Apache License 2.0

0 stars 0 forks source link

Code Inspection: npm audit on master #5

Closed atomist-bot closed 5 years ago

atomist-bot commented 5 years ago

lodash:<4.17.12

(error) Prototype Pollution Update to version 4.17.12 or later. - CVE-2019-10744
- lodash:4.17.11:
- @atomist/automation-client>graphql-code-generator>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-codegen-typescript-client>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-codegen-typescript-client>graphql-codegen-plugin-helpers>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-codegen-typescript-client>graphql-codegen-typescript-common>graphql-codegen-plugin-helpers>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-codegen-typescript-common>graphql-codegen-plugin-helpers>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-codegen-typescript-server>graphql-codegen-typescript-common>graphql-codegen-plugin-helpers>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-codegen-typescript-client>graphql-codegen-typescript-common>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-codegen-typescript-common>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-codegen-typescript-server>graphql-codegen-typescript-common>graphql-codegen-core>graphql-toolkit>lodash
- @atomist/automation-client>graphql-code-generator>graphql-toolkit>lodash

lodash.merge:<4.6.2

(error) Prototype Pollution Update to version 4.6.2 or later.
- lodash.merge:4.6.1:
- @atomist/automation-client>apollo>apollo-codegen-core>apollo-language-server>lodash.merge
- @atomist/automation-client>apollo>apollo-codegen-flow>apollo-codegen-core>apollo-language-server>lodash.merge
- @atomist/automation-client>apollo>apollo-codegen-scala>apollo-codegen-core>apollo-language-server>lodash.merge
- @atomist/automation-client>apollo>apollo-codegen-swift>apollo-codegen-core>apollo-language-server>lodash.merge
- @atomist/automation-client>apollo>apollo-codegen-typescript>apollo-codegen-core>apollo-language-server>lodash.merge
- @atomist/automation-client>apollo>apollo-language-server>lodash.merge

marked:>=0.3.14 <0.6.2

(warn) Regular Expression Denial of Service Upgrade to version 0.6.2 or later.
- marked:0.4.0:
- typedoc>marked

marked:>=0.4.0 <0.7.0

(info) Regular Expression Denial of Service Upgrade to version 0.7.0 or later.
- marked:0.6.3:
- @atomist/sdm-local>marked
- marked:0.4.0:
- typedoc>marked

[atomist:code-inspection:master=@atomist/atomist-sdm]

atomist-bot commented 5 years ago

Issue closed because last code inspection problem was fixed by @cdupuis when they pushed 0782491.

cdupuis commented 5 years ago

Issue closed because last code inspection problem was fixed by @atomist-bot when they pushed c24a391.

cdupuis commented 5 years ago

Issue closed because last code inspection problem was fixed by @cdupuis when they pushed 1b2c20b.

cdupuis commented 5 years ago

Issue closed because last code inspection problem was fixed by @cdupuis when they pushed 94a760c.