Update package-lock.json #58
Conversation
![prisma-cloud-devsecops[bot]](https://avatars.githubusercontent.com/in/135857?s=60&v=4){kind=small}
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
decode-uri-component 0.2.0 / package-lock.json
Total vulnerabilities: 2
| Critical: 0 | High: 1 | Medium: 1 | Low: 0 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2022-38900 |  HIGH |
7 | 0.2.1 |
Open |
| CVE-2022-38778 |  MEDIUM |
6.5 | 0.2.1 |
Open |
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
bson 1.0.9 / package-lock.json
Total vulnerabilities: 2
| Critical: 1 | High: 0 | Medium: 1 | Low: 0 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2020-7610 |  CRITICAL |
9.8 | 1.1.4 |
Open |
| CVE-2019-2391 | MEDIUM |
4 | 1.1.4 |
Open |
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
debug 2.2.0 / package-lock.json
Total vulnerabilities: 2
| Critical: 0 | High: 1 | Medium: 1 | Low: 0 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2017-20165 | HIGH |
7.5 | 2.6.9 |
Open |
| CVE-2017-16137 | MEDIUM |
5.3 | 2.6.9 |
Open |
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
nconf 0.6.9 / package-lock.json
Total vulnerabilities: 1
| Critical: 0 | High: 1 | Medium: 0 | Low: 0 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2022-21803 | HIGH |
7.5 | 0.11.4 |
Open |
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
ms 0.7.1 / package-lock.json
Total vulnerabilities: 1
| Critical: 0 | High: 0 | Medium: 1 | Low: 0 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2017-20162 | MEDIUM |
5.3 | 2.0.0 |
Open |
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
prompt 0.2.14 / package-lock.json
This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
ps-tree 0.0.3 / package-lock.json
This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
wordwrap 0.0.2 / package-lock.json
This package contains a license that is not OSI-approved.
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
yargs 3.5.4 / package-lock.json
This package contains a license that is not OSI-approved.
| @@ -2,7 +2,7 @@ | |||
| "name": "owasp-nodejs-goat", | |||
There was a problem hiding this comment.
utile 0.3.0 / package-lock.json
This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.
No description provided.