Skip to content

dependency problems #295

Open
Open
dependency problems#295
@it-iode

Description

@it-iode
it-iode
opened on Oct 19, 2023

see also : https://github.com/iodepo/OceanBestPractices/security/dependabot

  iodepo / OceanBestPractices Known security vulnerabilities detectedDependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity CVE-2020-7637 Moderate severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity CVE-2021-33623 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity CVE-2021-3803 High severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity CVE-2020-24025 Moderate severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity CVE-2021-3807 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity CVE-2022-25758 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity CVE-2022-24999 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity CVE-2019-18413 Critical severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency request Version <= 2.88.2   Defined in package-lock.json Vulnerabilities Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity CVE-2023-0842 Moderate severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity CVE-2023-26115 Moderate severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity CVE-2023-4316 Low severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity CVE-2023-44270 Moderate severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity
Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity CVE-2020-7637 Moderate severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity CVE-2021-33623 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity CVE-2021-3803 High severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity CVE-2020-24025 Moderate severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity CVE-2021-3807 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity CVE-2022-25758 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity CVE-2022-24999 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity CVE-2019-18413 Critical severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency request Version <= 2.88.2   Defined in package-lock.json Vulnerabilities Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity CVE-2023-0842 Moderate severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity CVE-2023-26115 Moderate severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity CVE-2023-4316 Low severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity CVE-2023-44270 Moderate severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity
Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity CVE-2020-7637 Moderate severity
Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1 Defined in package-lock.json Vulnerabilities CVE-2020-7637 Moderate severity CVE-2020-7637 Moderate severity
Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1
Defined in package-lock.json
Vulnerabilities CVE-2020-7637 Moderate severity CVE-2020-7637 Moderate severity
CVE-2020-7637 Moderate severity
Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity CVE-2021-33623 High severity
Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-33623 High severity CVE-2021-33623 High severity
Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1
Defined in package-lock.json
Vulnerabilities CVE-2021-33623 High severity CVE-2021-33623 High severity
CVE-2021-33623 High severity
Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity
Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3 Defined in package-lock.json Suggested update #273 Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity
Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3
Defined in package-lock.json Suggested update #273
Vulnerabilities CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity CVE-2021-32803 High severity CVE-2021-32804 High severity CVE-2021-37701 High severity CVE-2021-37712 High severity CVE-2021-37713 High severity
CVE-2021-32803 High severity
CVE-2021-32804 High severity
CVE-2021-37701 High severity
CVE-2021-37712 High severity
CVE-2021-37713 High severity
Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity CVE-2021-3803 High severity
Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1 Defined in package-lock.json Vulnerabilities CVE-2021-3803 High severity CVE-2021-3803 High severity
Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1
Defined in package-lock.json
Vulnerabilities CVE-2021-3803 High severity CVE-2021-3803 High severity
CVE-2021-3803 High severity
Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity CVE-2020-24025 Moderate severity
Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0 Defined in package-lock.json Suggested update #274 Vulnerabilities CVE-2020-24025 Moderate severity CVE-2020-24025 Moderate severity
Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0
Defined in package-lock.json Suggested update #274
Vulnerabilities CVE-2020-24025 Moderate severity CVE-2020-24025 Moderate severity
CVE-2020-24025 Moderate severity
Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity CVE-2021-3807 High severity
Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2021-3807 High severity CVE-2021-3807 High severity
Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1
Defined in package-lock.json
Vulnerabilities CVE-2021-3807 High severity CVE-2021-3807 High severity
CVE-2021-3807 High severity
Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity CVE-2022-25758 High severity
Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3 Defined in package-lock.json Vulnerabilities CVE-2022-25758 High severity CVE-2022-25758 High severity
Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3
Defined in package-lock.json
Vulnerabilities CVE-2022-25758 High severity CVE-2022-25758 High severity
CVE-2022-25758 High severity
Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity CVE-2022-24999 High severity
Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3 Defined in package-lock.json Vulnerabilities CVE-2022-24999 High severity CVE-2022-24999 High severity
Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3
Defined in package-lock.json
Vulnerabilities CVE-2022-24999 High severity CVE-2022-24999 High severity
CVE-2022-24999 High severity
Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity
Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2 Defined in package-lock.json Suggested update #272 Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity
Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2
Defined in package-lock.json Suggested update #272
Vulnerabilities CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity CVE-2022-46175 High severity
CVE-2022-46175 High severity
CVE-2022-46175 High severity
CVE-2022-46175 High severity
CVE-2022-46175 High severity
Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity CVE-2019-18413 Critical severity
Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0 Defined in package-lock.json Vulnerabilities CVE-2019-18413 Critical severity CVE-2019-18413 Critical severity
Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0
Defined in package-lock.json
Vulnerabilities CVE-2019-18413 Critical severity CVE-2019-18413 Critical severity
CVE-2019-18413 Critical severity
Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity
Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1 Defined in package-lock.json Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity
Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1
Defined in package-lock.json
Vulnerabilities CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity CVE-2022-25881 High severity
CVE-2022-25881 High severity
CVE-2022-25881 High severity
Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity
Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0 Defined in package-lock.json Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity
Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0
Defined in package-lock.json
Vulnerabilities CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity CVE-2023-28154 High severity
CVE-2023-28154 High severity
CVE-2023-28154 High severity
Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency request Version <= 2.88.2   Defined in package-lock.json Vulnerabilities
Dependency request Version <= 2.88.2 Defined in package-lock.json Vulnerabilities Dependency request Version <= 2.88.2   Defined in package-lock.json Vulnerabilities
Dependency request Version <= 2.88.2  
Defined in package-lock.json
Vulnerabilities
Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity CVE-2023-0842 Moderate severity
Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0 Defined in package-lock.json Vulnerabilities CVE-2023-0842 Moderate severity CVE-2023-0842 Moderate severity
Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0
Defined in package-lock.json
Vulnerabilities CVE-2023-0842 Moderate severity CVE-2023-0842 Moderate severity
CVE-2023-0842 Moderate severity
Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity CVE-2023-34104 High severity CVE-2023-26920 High severity
Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity CVE-2023-34104 High severity CVE-2023-26920 High severity
Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4
Defined in package-lock.json
Vulnerabilities CVE-2023-34104 High severity CVE-2023-26920 High severity CVE-2023-34104 High severity CVE-2023-26920 High severity
CVE-2023-34104 High severity
CVE-2023-26920 High severity
Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity
Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3 Defined in package-lock.json Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity
Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3
Defined in package-lock.json
Vulnerabilities CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity CVE-2023-26136 Moderate severity
CVE-2023-26136 Moderate severity
CVE-2023-26136 Moderate severity
Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity
Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2 Defined in package-lock.json Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity
Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2
Defined in package-lock.json
Vulnerabilities CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity CVE-2022-25883 Moderate severity
CVE-2022-25883 Moderate severity
CVE-2022-25883 Moderate severity
CVE-2022-25883 Moderate severity
Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity CVE-2023-26115 Moderate severity
Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4 Defined in package-lock.json Vulnerabilities CVE-2023-26115 Moderate severity CVE-2023-26115 Moderate severity
Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4
Defined in package-lock.json
Vulnerabilities CVE-2023-26115 Moderate severity CVE-2023-26115 Moderate severity
CVE-2023-26115 Moderate severity
Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity CVE-2023-4316 Low severity
Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3 Defined in package-lock.json Vulnerabilities CVE-2023-4316 Low severity CVE-2023-4316 Low severity
Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3
Defined in package-lock.json
Vulnerabilities CVE-2023-4316 Low severity CVE-2023-4316 Low severity
CVE-2023-4316 Low severity
Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity CVE-2023-44270 Moderate severity
Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31 Defined in package-lock.json Vulnerabilities CVE-2023-44270 Moderate severity CVE-2023-44270 Moderate severity
Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31
Defined in package-lock.json
Vulnerabilities CVE-2023-44270 Moderate severity CVE-2023-44270 Moderate severity
CVE-2023-44270 Moderate severity
Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity
Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2 Defined in package-lock.json Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity
Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2
Defined in package-lock.json
Vulnerabilities CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity CVE-2023-45133 Critical severity
CVE-2023-45133 Critical severity
CVE-2023-45133 Critical severity

iodepo / OceanBestPractices

Known security vulnerabilities detected
Dependency class-transformer Version < 0.3.1 Upgrade to ~> 0.3.1
Defined in package-lock.json
Vulnerabilities
CVE-2020-7637 Moderate severity
Dependency trim-newlines Version < 3.0.1 Upgrade to ~> 3.0.1
Defined in package-lock.json
Vulnerabilities
CVE-2021-33623 High severity
Dependency tar Version < 3.2.3 Upgrade to ~> 3.2.3
Defined in package-lock.json Suggested update #273
Vulnerabilities
CVE-2021-32803 High severity
CVE-2021-32804 High severity
CVE-2021-37701 High severity
CVE-2021-37712 High severity
CVE-2021-37713 High severity
Dependency nth-check Version < 2.0.1 Upgrade to ~> 2.0.1
Defined in package-lock.json
Vulnerabilities
CVE-2021-3803 High severity
Dependency node-sass Version >= 2.0.0 < 7.0.0 Upgrade to ~> 7.0.0
Defined in package-lock.json Suggested update #274
Vulnerabilities
CVE-2020-24025 Moderate severity
Dependency ansi-regex Version >= 4.0.0 < 4.1.1 Upgrade to ~> 4.1.1
Defined in package-lock.json
Vulnerabilities
CVE-2021-3807 High severity
Dependency scss-tokenizer Version <= 0.4.2 Upgrade to ~> 0.4.3
Defined in package-lock.json
Vulnerabilities
CVE-2022-25758 High severity
Dependency qs Version >= 6.5.0 < 6.5.3 Upgrade to ~> 6.5.3
Defined in package-lock.json
Vulnerabilities
CVE-2022-24999 High severity
Dependency json5 Version >= 2.0.0 < 2.2.2 Upgrade to ~> 2.2.2
Defined in package-lock.json Suggested update #272
Vulnerabilities
CVE-2022-46175 High severity
CVE-2022-46175 High severity
CVE-2022-46175 High severity
CVE-2022-46175 High severity
Dependency class-validator Version < 0.14.0 Upgrade to ~> 0.14.0
Defined in package-lock.json
Vulnerabilities
CVE-2019-18413 Critical severity
Dependency http-cache-semantics Version < 4.1.1 Upgrade to ~> 4.1.1
Defined in package-lock.json
Vulnerabilities
CVE-2022-25881 High severity
CVE-2022-25881 High severity
Dependency webpack Version >= 5.0.0 < 5.76.0 Upgrade to ~> 5.76.0
Defined in package-lock.json
Vulnerabilities
CVE-2023-28154 High severity
CVE-2023-28154 High severity
Dependency request Version <= 2.88.2
Defined in package-lock.json
Vulnerabilities
Dependency xml2js Version < 0.5.0 Upgrade to ~> 0.5.0
Defined in package-lock.json
Vulnerabilities
CVE-2023-0842 Moderate severity
Dependency fast-xml-parser Version < 4.2.4 Upgrade to ~> 4.2.4
Defined in package-lock.json
Vulnerabilities
CVE-2023-34104 High severity
CVE-2023-26920 High severity
Dependency tough-cookie Version < 4.1.3 Upgrade to ~> 4.1.3
Defined in package-lock.json
Vulnerabilities
CVE-2023-26136 Moderate severity
CVE-2023-26136 Moderate severity
Dependency semver Version < 5.7.2 Upgrade to ~> 5.7.2
Defined in package-lock.json
Vulnerabilities
CVE-2022-25883 Moderate severity
CVE-2022-25883 Moderate severity
CVE-2022-25883 Moderate severity
Dependency word-wrap Version < 1.2.4 Upgrade to ~> 1.2.4
Defined in package-lock.json
Vulnerabilities
CVE-2023-26115 Moderate severity
Dependency zod Version <= 3.22.2 Upgrade to ~> 3.22.3
Defined in package-lock.json
Vulnerabilities
CVE-2023-4316 Low severity
Dependency postcss Version < 8.4.31 Upgrade to ~> 8.4.31
Defined in package-lock.json
Vulnerabilities
CVE-2023-44270 Moderate severity
Dependency @babel/traverse Version < 7.23.2 Upgrade to ~> 7.23.2
Defined in package-lock.json
Vulnerabilities
CVE-2023-45133 Critical severity
CVE-2023-45133 Critical severity

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions