Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Warnings in newer version : npm audit #262

Open
svankireddy-cartera opened this issue Jun 5, 2018 · 0 comments
Open

Security Warnings in newer version : npm audit #262

svankireddy-cartera opened this issue Jun 5, 2018 · 0 comments

Comments

@svankireddy-cartera
Copy link

svankireddy-cartera commented Jun 5, 2018

     C:\new npm packages   audit\new>npm audit                           

      === npm audit security report ===

  # Run  npm install   mocha-phantomjs@4.1.0  to resolve 12   vulnerabilities    
        Moderate        Regular Expression Denial of Service            Package         semver            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > npmconf > semver            More info         https://nodesecurity.io/advisories/31                          

Moderate        Remote Memory Exposure            Package         request            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request            More info         https://nodesecurity.io/advisories/309                          

 Moderate        Regular Expression Denial of   Service            Package         mime            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > form-data > mime            More info       https://nodesecurity.io/advisories/535                     

      Moderate        Regular Expression Denial of   Service            Package         mime            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > mime            More info       https://nodesecurity.io/advisories/535                        

   Moderate        Regular Expression Denial of   Service            Package         hawk            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk            More info       https://nodesecurity.io/advisories/77                

           Moderate        Prototype pollution            Package         hoek            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk > boom > hoek            More info         https://nodesecurity.io/advisories/566                       

   Moderate        Prototype pollution            Package         hoek            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk > cryptiles >                       boom >   hoek            More info       https://nodesecurity.io/advisories/566         
                  
Moderate        Prototype pollution            Package         hoek            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk > hoek            More info       https://nodesecurity.io/advisories/566                          

 Moderate        Prototype pollution            Package         hoek            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > hawk > sntp > hoek            More info       https://nodesecurity.io/advisories/566                          

 High            Denial-of-Service Memory   Exhaustion            Package         qs            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > qs            More info       https://nodesecurity.io/advisories/29                          

 High            Denial-of-Service Extended Event   Loop Blocking            Package         qs            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > qs            More info       https://nodesecurity.io/advisories/28                           

Moderate        Memory Exposure            Package         tunnel-agent            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > request > tunnel-agent            More info         https://nodesecurity.io/advisories/598                                                            Manual Review                  Some vulnerabilities   require your attention to resolve                    Visit   https://go.npm.me/audit-guide for additional guidance                 

Moderate        Out-of-bounds Read            Package         npmconf            Patched in      >=2.1.3            Dependency of   mocha-phantomjs            Path            mocha-phantomjs > phantomjs   > npmconf            More info         https://nodesecurity.io/advisories/653               [!] 13 vulnerabilities found - Packages audited: 337486 (0 dev, 23 optional)         Severity: 11 Moderate \| 2 High
--
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant