# npm audit report
css-what 4.0.0 - 5.0.0
Severity: high
Denial of service in css-what - https://github.com/advisories/GHSA-q8pj-2vqx-8ggc
fix available via `npm audit fix --force`
Will install cheerio@1.0.0-rc.10, which is outside the stated dependency range
node_modules/css-what
cheerio-select-tmp *
Depends on vulnerable versions of css-what
node_modules/cheerio-select-tmp
cheerio 1.0.0-rc.1 - 1.0.0-rc.5
Depends on vulnerable versions of cheerio-select-tmp
node_modules/cheerio
css-select 3.1.1 - 3.1.2
Depends on vulnerable versions of css-what
node_modules/css-select
glob-parent <5.1.2
Severity: high
Regular expression denial of service - https://github.com/advisories/GHSA-ww39-953v-wcq6
fix available via `npm audit fix --force`
Will install xo@0.47.0, which is a breaking change
node_modules/xo/node_modules/glob-parent
fast-glob <=2.2.7
Depends on vulnerable versions of glob-parent
node_modules/xo/node_modules/fast-glob
globby 8.0.0 - 9.2.0
Depends on vulnerable versions of fast-glob
node_modules/xo/node_modules/globby
xo 0.20.0 - 0.41.0
Depends on vulnerable versions of globby
node_modules/xo
8 high severity vulnerabilities
This PR updates cheerio to
1.0.0-rc.10
and xo to0.47.0
and bumps this package to4.0.1
.Also fix tests not running after updating dependencies.
The following is the output of
npm audit
Tested with node
v12.22.7
andv17.2.0