|
1 | 1 | { |
2 | 2 | "auditReportVersion": 2, |
3 | 3 | "vulnerabilities": { |
4 | | - "@eslint-community/eslint-utils": { |
5 | | - "name": "@eslint-community/eslint-utils", |
6 | | - "severity": "moderate", |
7 | | - "isDirect": false, |
8 | | - "via": [ |
9 | | - "eslint" |
10 | | - ], |
11 | | - "effects": [ |
12 | | - "@typescript-eslint/utils", |
13 | | - "eslint" |
14 | | - ], |
15 | | - "range": "*", |
16 | | - "nodes": [ |
17 | | - "node_modules/@eslint-community/eslint-utils" |
18 | | - ], |
19 | | - "fixAvailable": false |
20 | | - }, |
21 | | - "@eslint/eslintrc": { |
22 | | - "name": "@eslint/eslintrc", |
23 | | - "severity": "moderate", |
24 | | - "isDirect": false, |
25 | | - "via": [ |
26 | | - "ajv" |
27 | | - ], |
28 | | - "effects": [ |
29 | | - "eslint" |
30 | | - ], |
31 | | - "range": "*", |
32 | | - "nodes": [ |
33 | | - "node_modules/@eslint/eslintrc" |
34 | | - ], |
35 | | - "fixAvailable": false |
36 | | - }, |
37 | 4 | "@typescript-eslint/eslint-plugin": { |
38 | 5 | "name": "@typescript-eslint/eslint-plugin", |
39 | | - "severity": "moderate", |
| 6 | + "severity": "high", |
40 | 7 | "isDirect": true, |
41 | 8 | "via": [ |
42 | | - "@typescript-eslint/parser", |
43 | 9 | "@typescript-eslint/type-utils", |
44 | | - "@typescript-eslint/utils", |
45 | | - "eslint" |
| 10 | + "@typescript-eslint/utils" |
46 | 11 | ], |
47 | 12 | "effects": [], |
48 | | - "range": "*", |
| 13 | + "range": "6.16.0 - 7.5.0", |
49 | 14 | "nodes": [ |
50 | 15 | "node_modules/@typescript-eslint/eslint-plugin" |
51 | 16 | ], |
52 | | - "fixAvailable": false |
| 17 | + "fixAvailable": true |
53 | 18 | }, |
54 | 19 | "@typescript-eslint/parser": { |
55 | 20 | "name": "@typescript-eslint/parser", |
56 | | - "severity": "moderate", |
| 21 | + "severity": "high", |
57 | 22 | "isDirect": true, |
58 | 23 | "via": [ |
59 | | - "eslint" |
| 24 | + "@typescript-eslint/typescript-estree" |
60 | 25 | ], |
61 | | - "effects": [ |
62 | | - "@typescript-eslint/eslint-plugin" |
63 | | - ], |
64 | | - "range": "*", |
| 26 | + "effects": [], |
| 27 | + "range": "6.16.0 - 7.5.0", |
65 | 28 | "nodes": [ |
66 | 29 | "node_modules/@typescript-eslint/parser" |
67 | 30 | ], |
68 | | - "fixAvailable": false |
| 31 | + "fixAvailable": true |
69 | 32 | }, |
70 | 33 | "@typescript-eslint/type-utils": { |
71 | 34 | "name": "@typescript-eslint/type-utils", |
72 | | - "severity": "moderate", |
| 35 | + "severity": "high", |
| 36 | + "isDirect": false, |
| 37 | + "via": [ |
| 38 | + "@typescript-eslint/typescript-estree", |
| 39 | + "@typescript-eslint/utils" |
| 40 | + ], |
| 41 | + "effects": [], |
| 42 | + "range": "6.16.0 - 7.5.0", |
| 43 | + "nodes": [ |
| 44 | + "node_modules/@typescript-eslint/type-utils" |
| 45 | + ], |
| 46 | + "fixAvailable": true |
| 47 | + }, |
| 48 | + "@typescript-eslint/typescript-estree": { |
| 49 | + "name": "@typescript-eslint/typescript-estree", |
| 50 | + "severity": "high", |
73 | 51 | "isDirect": false, |
74 | 52 | "via": [ |
75 | | - "@typescript-eslint/utils", |
76 | | - "eslint" |
| 53 | + "minimatch" |
77 | 54 | ], |
78 | 55 | "effects": [ |
79 | | - "@typescript-eslint/eslint-plugin" |
| 56 | + "@typescript-eslint/parser", |
| 57 | + "@typescript-eslint/type-utils", |
| 58 | + "@typescript-eslint/utils" |
80 | 59 | ], |
81 | | - "range": ">=5.9.2-alpha.0", |
| 60 | + "range": "6.16.0 - 7.5.0", |
82 | 61 | "nodes": [ |
83 | | - "node_modules/@typescript-eslint/type-utils" |
| 62 | + "node_modules/@typescript-eslint/typescript-estree" |
84 | 63 | ], |
85 | | - "fixAvailable": false |
| 64 | + "fixAvailable": true |
86 | 65 | }, |
87 | 66 | "@typescript-eslint/utils": { |
88 | 67 | "name": "@typescript-eslint/utils", |
89 | | - "severity": "moderate", |
| 68 | + "severity": "high", |
90 | 69 | "isDirect": false, |
91 | 70 | "via": [ |
92 | | - "@eslint-community/eslint-utils", |
93 | | - "eslint" |
| 71 | + "@typescript-eslint/typescript-estree" |
94 | 72 | ], |
95 | 73 | "effects": [ |
96 | | - "@typescript-eslint/eslint-plugin", |
97 | | - "@typescript-eslint/type-utils" |
| 74 | + "@typescript-eslint/eslint-plugin" |
98 | 75 | ], |
99 | | - "range": "*", |
| 76 | + "range": "6.16.0 - 7.5.0", |
100 | 77 | "nodes": [ |
101 | 78 | "node_modules/@typescript-eslint/utils" |
102 | 79 | ], |
103 | | - "fixAvailable": false |
| 80 | + "fixAvailable": true |
104 | 81 | }, |
105 | 82 | "ajv": { |
106 | 83 | "name": "ajv", |
107 | 84 | "severity": "moderate", |
108 | 85 | "isDirect": false, |
109 | 86 | "via": [ |
110 | 87 | { |
111 | | - "source": 1113214, |
| 88 | + "source": 1113428, |
112 | 89 | "name": "ajv", |
113 | 90 | "dependency": "ajv", |
114 | 91 | "title": "ajv has ReDoS when using `$data` option", |
115 | 92 | "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6", |
116 | 93 | "severity": "moderate", |
117 | 94 | "cwe": [ |
118 | | - "CWE-400" |
| 95 | + "CWE-400", |
| 96 | + "CWE-1333" |
119 | 97 | ], |
120 | 98 | "cvss": { |
121 | 99 | "score": 0, |
122 | 100 | "vectorString": null |
123 | 101 | }, |
124 | | - "range": "<8.18.0" |
| 102 | + "range": "<6.14.0" |
125 | 103 | } |
126 | 104 | ], |
127 | | - "effects": [ |
128 | | - "@eslint/eslintrc", |
129 | | - "eslint" |
130 | | - ], |
131 | | - "range": "<8.18.0", |
| 105 | + "effects": [], |
| 106 | + "range": "<6.14.0", |
132 | 107 | "nodes": [ |
133 | 108 | "node_modules/ajv" |
134 | 109 | ], |
135 | | - "fixAvailable": false |
136 | | - }, |
137 | | - "eslint": { |
138 | | - "name": "eslint", |
139 | | - "severity": "moderate", |
140 | | - "isDirect": true, |
141 | | - "via": [ |
142 | | - "@eslint-community/eslint-utils", |
143 | | - "@eslint/eslintrc", |
144 | | - "ajv" |
145 | | - ], |
146 | | - "effects": [ |
147 | | - "@eslint-community/eslint-utils", |
148 | | - "@typescript-eslint/eslint-plugin", |
149 | | - "@typescript-eslint/parser", |
150 | | - "@typescript-eslint/type-utils", |
151 | | - "@typescript-eslint/utils", |
152 | | - "eslint-config-prettier", |
153 | | - "eslint-plugin-prettier" |
154 | | - ], |
155 | | - "range": ">=4.2.0", |
156 | | - "nodes": [ |
157 | | - "node_modules/eslint" |
158 | | - ], |
159 | | - "fixAvailable": false |
| 110 | + "fixAvailable": true |
160 | 111 | }, |
161 | | - "eslint-config-prettier": { |
162 | | - "name": "eslint-config-prettier", |
163 | | - "severity": "moderate", |
164 | | - "isDirect": true, |
| 112 | + "minimatch": { |
| 113 | + "name": "minimatch", |
| 114 | + "severity": "high", |
| 115 | + "isDirect": false, |
165 | 116 | "via": [ |
166 | | - "eslint" |
| 117 | + { |
| 118 | + "source": 1113459, |
| 119 | + "name": "minimatch", |
| 120 | + "dependency": "minimatch", |
| 121 | + "title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", |
| 122 | + "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", |
| 123 | + "severity": "high", |
| 124 | + "cwe": [ |
| 125 | + "CWE-1333" |
| 126 | + ], |
| 127 | + "cvss": { |
| 128 | + "score": 0, |
| 129 | + "vectorString": null |
| 130 | + }, |
| 131 | + "range": "<3.1.3" |
| 132 | + }, |
| 133 | + { |
| 134 | + "source": 1113465, |
| 135 | + "name": "minimatch", |
| 136 | + "dependency": "minimatch", |
| 137 | + "title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", |
| 138 | + "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", |
| 139 | + "severity": "high", |
| 140 | + "cwe": [ |
| 141 | + "CWE-1333" |
| 142 | + ], |
| 143 | + "cvss": { |
| 144 | + "score": 0, |
| 145 | + "vectorString": null |
| 146 | + }, |
| 147 | + "range": ">=9.0.0 <9.0.6" |
| 148 | + } |
167 | 149 | ], |
168 | 150 | "effects": [ |
169 | | - "eslint-plugin-prettier" |
170 | | - ], |
171 | | - "range": ">=7.0.0", |
172 | | - "nodes": [ |
173 | | - "node_modules/eslint-config-prettier" |
174 | | - ], |
175 | | - "fixAvailable": { |
176 | | - "name": "eslint-config-prettier", |
177 | | - "version": "6.15.0", |
178 | | - "isSemVerMajor": true |
179 | | - } |
180 | | - }, |
181 | | - "eslint-plugin-prettier": { |
182 | | - "name": "eslint-plugin-prettier", |
183 | | - "severity": "moderate", |
184 | | - "isDirect": true, |
185 | | - "via": [ |
186 | | - "eslint", |
187 | | - "eslint-config-prettier" |
| 151 | + "@typescript-eslint/typescript-estree" |
188 | 152 | ], |
189 | | - "effects": [], |
190 | | - "range": ">=3.0.0", |
| 153 | + "range": "<3.1.3 || >=9.0.0 <9.0.6", |
191 | 154 | "nodes": [ |
192 | | - "node_modules/eslint-plugin-prettier" |
193 | | - ], |
194 | | - "fixAvailable": { |
195 | | - "name": "eslint-plugin-prettier", |
196 | | - "version": "2.7.0", |
197 | | - "isSemVerMajor": true |
198 | | - } |
| 155 | + "node_modules/@eslint/eslintrc/node_modules/minimatch", |
| 156 | + "node_modules/@humanwhocodes/config-array/node_modules/minimatch", |
| 157 | + "node_modules/eslint/node_modules/minimatch", |
| 158 | + "node_modules/glob/node_modules/minimatch", |
| 159 | + "node_modules/minimatch", |
| 160 | + "node_modules/test-exclude/node_modules/minimatch" |
| 161 | + ], |
| 162 | + "fixAvailable": true |
199 | 163 | } |
200 | 164 | }, |
201 | 165 | "metadata": { |
202 | 166 | "vulnerabilities": { |
203 | 167 | "info": 0, |
204 | 168 | "low": 0, |
205 | | - "moderate": 10, |
206 | | - "high": 0, |
| 169 | + "moderate": 1, |
| 170 | + "high": 6, |
207 | 171 | "critical": 0, |
208 | | - "total": 10 |
| 172 | + "total": 7 |
209 | 173 | }, |
210 | 174 | "dependencies": { |
211 | 175 | "prod": 7, |
|
0 commit comments