blakejoy / tmdb-ts

Typescript client wrapper for TheMovieDB (TMDB) v3
MIT License
39 stars 12 forks source link

Fixed vulnerabilities in package-lock.json #3

Closed joelhenryclark123 closed 1 year ago

joelhenryclark123 commented 1 year ago

Created a fork to add a couple endpoints, and I got some vulnerability warnings when running npm install. I fixed them with nothing but npm audit.

5 vulnerabilities (1 moderate, 3 high, 1 critical)

ansi-regex 5.0.0 Severity: high Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw fix available via npm audit fix node_modules/ansi-regex

cross-fetch <=2.2.3 || 2.2.5 || 3.0.0 - 3.1.4 || >=3.2.0-alpha.0 Severity: high Incorrect Authorization in cross-fetch - https://github.com/advisories/GHSA-7gc6-qh9x-w6h8 Depends on vulnerable versions of node-fetch fix available via npm audit fix node_modules/cross-fetch

minimist <1.2.6 Severity: critical Prototype Pollution in minimist - https://github.com/advisories/GHSA-xvch-5gv4-984h fix available via npm audit fix node_modules/minimist

node-fetch <2.6.7 Severity: high node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g fix available via npm audit fix node_modules/node-fetch

path-parse <1.0.7 Severity: moderate Regular Expression Denial of Service in path-parse - https://github.com/advisories/GHSA-hj48-42vr-x3v9 fix available via npm audit fix node_modules/path-parse