canjs / can-compile

Compile CanJS Mustache and EJS views for lightning fast production apps
http://daffl.github.com/can-compile
MIT License
35 stars 15 forks source link

vulnerabilities found - npm audit #72

Open svankireddy-cartera opened 6 years ago

svankireddy-cartera commented 6 years ago

npm audit

added 74   packages from 81 contributors and removed 46 packages in 16.781s     [!] 4 vulnerabilities found [337533 packages audited]         Severity: 2 Low \| 2 High         Run `npm audit` for more   detail                                          === npm audit   security report ===                                     

             Manual Review                  Some vulnerabilities   require your attention to resolve                    Visit   https://go.npm.me/audit-guide for additional guidance          

       High            Regular Expression Denial of Service            Package         minimatch            Patched in      >=3.0.2            Dependency of   can-compile            Path            can-compile > glob > minimatch            More info         https://nodesecurity.io/advisories/118       

          High            Cross-Site Scripting            Package         handlebars            Patched in      >=4.0.0            Dependency of   can-compile            Path            can-compile > handlebars            More info         https://nodesecurity.io/advisories/61            

     Low             Incorrect Handling of   Non-Boolean Comparisons During                       Minification            Package         uglify-js            Patched in      >= 2.4.24            Dependency of   can-compile            Path            can-compile > handlebars >   uglify-js            More info         https://nodesecurity.io/advisories/39         

        Low             Regular Expression Denial of   Service            Package         uglify-js            Patched in      >=2.6.0            Dependency of   can-compile            Path            can-compile > handlebars >   uglify-js            More info         https://nodesecurity.io/advisories/48               [!] 4 vulnerabilities found - Packages audited: 337533 (0 dev, 0   optional)         Severity: 2 Low \| 2 High
--