nathanboktae / mocha-phantomjs

:coffee: :ghost: Run client-side mocha tests in the command line through phantomjs
MIT License
954 stars 112 forks source link

Security Warnings in newer version : npm audit #262

Open svankireddy-cartera opened 6 years ago

svankireddy-cartera commented 6 years ago
     C:\new npm packages   audit\new>npm audit                           

      === npm audit security report ===

  # Run  npm install   mocha-phantomjs@4.1.0  to resolve 12   vulnerabilities    
        Moderate        Regular Expression Denial of Service            Package         semver            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > npmconf > semver            More info         https://nodesecurity.io/advisories/31                          

Moderate        Remote Memory Exposure            Package         request            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request            More info         https://nodesecurity.io/advisories/309                          

 Moderate        Regular Expression Denial of   Service            Package         mime            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > form-data > mime            More info       https://nodesecurity.io/advisories/535                     

      Moderate        Regular Expression Denial of   Service            Package         mime            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > mime            More info       https://nodesecurity.io/advisories/535                        

   Moderate        Regular Expression Denial of   Service            Package         hawk            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk            More info       https://nodesecurity.io/advisories/77                

           Moderate        Prototype pollution            Package         hoek            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk > boom > hoek            More info         https://nodesecurity.io/advisories/566                       

   Moderate        Prototype pollution            Package         hoek            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk > cryptiles >                       boom >   hoek            More info       https://nodesecurity.io/advisories/566         
                  
Moderate        Prototype pollution            Package         hoek            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk > hoek            More info       https://nodesecurity.io/advisories/566                          

 Moderate        Prototype pollution            Package         hoek            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk > sntp > hoek            More info       https://nodesecurity.io/advisories/566                          

 High            Denial-of-Service Memory   Exhaustion            Package         qs            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > qs            More info       https://nodesecurity.io/advisories/29                          

 High            Denial-of-Service Extended Event   Loop Blocking            Package         qs            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > qs            More info       https://nodesecurity.io/advisories/28                           

Moderate        Memory Exposure            Package         tunnel-agent            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > tunnel-agent            More info         https://nodesecurity.io/advisories/598                                                            Manual Review                  Some vulnerabilities   require your attention to resolve                    Visit   https://go.npm.me/audit-guide for additional guidance                 

Moderate        Out-of-bounds Read            Package         npmconf            Patched in      >=2.1.3            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > npmconf            More info         https://nodesecurity.io/advisories/653               [!] 13 vulnerabilities found - Packages audited: 337486 (0 dev, 23 optional)         Severity: 11 Moderate \| 2 High
--