mraible / jhipster-book Goto Github PK

# npm audit report

async  <2.6.4
Severity: high
Prototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/async
  portscanner  0.1.1 - 2.1.1
  Depends on vulnerable versions of async
  node_modules/portscanner
    browser-sync  <=0.6.2 || >=2.0.0-rc1
    Depends on vulnerable versions of portscanner
    node_modules/browser-sync

convict  <6.2.2
Severity: high
Prototype Pollution in convict - https://github.com/advisories/GHSA-x2w5-725j-gf2g
fix available via `npm audit fix`
node_modules/mini-book-site-generator/node_modules/convict
  @antora/playbook-builder  <=3.0.0-rc.6
  Depends on vulnerable versions of convict
  node_modules/mini-book-site-generator/node_modules/@antora/playbook-builder

glob-parent  <5.1.2
Severity: high
Regular expression denial of service in glob-parent - https://github.com/advisories/GHSA-ww39-953v-wcq6
fix available via `npm audit fix`
node_modules/glob-parent
  glob-stream  5.3.0 - 6.1.0
  Depends on vulnerable versions of glob-parent
  node_modules/glob-stream
    vinyl-fs  >=2.4.2
    Depends on vulnerable versions of glob-stream
    node_modules/vinyl-fs
      @antora/site-publisher  <=3.0.0-rc.6
      Depends on vulnerable versions of gulp-vinyl-zip
      Depends on vulnerable versions of vinyl-fs
      node_modules/@antora/site-publisher
      gulp-vinyl-zip  >=2.1.1
      Depends on vulnerable versions of vinyl-fs
      node_modules/gulp-vinyl-zip

isomorphic-git  <1.8.2
Severity: moderate
Directory Traversal in isomorphic-git - https://github.com/advisories/GHSA-fgxq-p49f-qw99
No fix available
node_modules/isomorphic-git
  mini-book-site-generator  *
  Depends on vulnerable versions of isomorphic-git
  node_modules/mini-book-site-generator

12 vulnerabilities (2 moderate, 10 high)