search

jambonz / time-series

write and query data to time series daetabase
MIT License
0 stars 6 forks source link

fix critical vulnerabilities #8

Closed Catharsis68 closed 7 months ago

Catharsis68 commented 7 months ago

Fix these vulnerabilities via npm audit fix

added 8 packages, removed 1 package, changed 19 packages, and audited 285 packages in 2s

61 packages are looking for funding run npm fund for details

found 0 vulnerabilities

npm audit report

@babel/traverse <7.23.2 Severity: critical Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code - https://github.com/advisories/GHSA-67hx-6x53-jw92 fix available via npm audit fix node_modules/@babel/traverse

json5 2.0.0 - 2.2.1 Severity: high Prototype Pollution in JSON5 via Parse Method - https://github.com/advisories/GHSA-9c47-m6qq-7p4h fix available via npm audit fix node_modules/json5

minimatch <3.0.5 Severity: high minimatch ReDoS vulnerability - https://github.com/advisories/GHSA-f8q6-p94x-37v3 fix available via npm audit fix node_modules/minimatch

semver 6.0.0 - 6.3.0 || 7.0.0 - 7.5.1 Severity: moderate semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw fix available via npm audit fix node_modules/@babel/core/node_modules/semver node_modules/@babel/helper-compilation-targets/node_modules/semver node_modules/istanbul-lib-instrument/node_modules/semver node_modules/make-dir/node_modules/semver node_modules/semver

word-wrap <1.2.4 Severity: moderate word-wrap vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-j8xg-fqg3-53r7 fix available via npm audit fix node_modules/word-wrap

5 vulnerabilities (2 moderate, 2 high, 1 critical)