diff --git a/audit-ci.jsonc b/audit-ci.jsonc index 22c6efd43a..bb855cfa32 100644 --- a/audit-ci.jsonc +++ b/audit-ci.jsonc @@ -15,16 +15,16 @@ // Although this ReDoS attack is mainly applicable to servers, in theory a server could also send malicious headers to the client (UI5 Tooling) to cause an unexpected slowdown. // However, this configured npm registry is already considered a trusted connection as code is downloaded and run by the client. "GHSA-rc47-6667-2j5j", - + // "cacheable-request" has a dependency to "http-cache-semantics" (GHSA-rc47-6667-2j5j) which is // why it is considered as high severity. Not applicable as described above for GHSA-rc47-6667-2j5j. "GHSA-8x6c-cv3v-vp6g", - + // "semver" vulnerable to Regular Expression Denial of Service. // "semver" is a dependency of "make-dir" that's only used in v2 branch. As we have decided to // deprecate the v2 branch and encourage people to migrate their projects to v3, we are not // considering fix for this. - "GHSA-c2qf-rxjj-qqgw|semver>", // Direct path + "GHSA-c2qf-rxjj-qqgw|semver", // Direct path "GHSA-c2qf-rxjj-qqgw|*make-dir>semver*", "GHSA-c2qf-rxjj-qqgw|*>normalize-package-data>semver*", "GHSA-c2qf-rxjj-qqgw|*npm-package-arg>semver*"