Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Chore: fixes some npm audit vulnerabilities - autoclosed #12

Closed
wants to merge 1 commit into from

Conversation

lalaps[bot]
Copy link

@lalaps lalaps bot commented Jul 21, 2022

This PR fixes some of found vulnerabilities.

Fixed 1 of 6 npm vulnerabilities.
5 issues left.
Success Rate: 16.7%

Vulnerabilities:

Authorization Bypass in parse-path
Library: parse-path
Affected versions: <5.0.0
Severity: high
Fix: ❌ 1.0.5
Root Libraries:

  • semantic-release-telegram >=1.1.0. Fixed in 1.0.5

Terser insecure use of regular expressions before v4.8.1 and v5.14.2 leads to ReDoS
Library: terser
Affected versions: >=5.0.0 <5.14.2
Severity: moderate
Fix: ✔️ true
Root Libraries:

You can wait for the next updates with a full fix or merge immediately.
In case of closing this PR, it will be recreated. If that's undesired, modify config.


This change is Reviewable

No fix can further be provided.

@pustovitDmytro
Copy link
Owner

Fails
🚫

Danger failed to run .dangerfile.js.

Error Error

Cannot find module '@commitlint/lint'
Require stack:
- .dangerfile.js
- /home/circleci/project/node_modules/danger/distribution/runner/runners/inline.js
- /home/circleci/project/node_modules/danger/distribution/commands/danger-runner.js
Error: Cannot find module '@commitlint/lint'
Require stack:
- .dangerfile.js
- /home/circleci/project/node_modules/danger/distribution/runner/runners/inline.js
- /home/circleci/project/node_modules/danger/distribution/commands/danger-runner.js
    at Function.Module._resolveFilename (internal/modules/cjs/loader.js:902:15)
    at Function.Module._load (internal/modules/cjs/loader.js:746:27)
    at Function._module2.default._load (/home/circleci/project/node_modules/override-require/dist/overrideRequire.js:43:25)
    at Module.require (internal/modules/cjs/loader.js:974:19)
    at require (internal/modules/cjs/helpers.js:93:18)
    at Object.<anonymous> (.dangerfile.js:8:36)
    at Module._compile (internal/modules/cjs/loader.js:1085:14)
    at requireFromString (/home/circleci/project/node_modules/require-from-string/index.js:28:4)
    at /home/circleci/project/node_modules/danger/distribution/runner/runners/inline.js:157:68
    at step (/home/circleci/project/node_modules/danger/distribution/runner/runners/inline.js:52:23)

Dangerfile

------------------^

Generated by 🚫 dangerJS against 94b3521

@lalaps lalaps bot changed the title Chore: fixes some npm audit vulnerabilities Chore: fixes some npm audit vulnerabilities - autoclosed Jul 23, 2022
@lalaps lalaps bot closed this Jul 23, 2022
@lalaps lalaps bot deleted the lalaps/npm-partial-fix branch July 23, 2022 00:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant