Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 20 vulnerabilities #179

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Omrisnyk
Copy link
Owner

@Omrisnyk Omrisnyk commented Sep 6, 2024

snyk-top-banner

Snyk has created this PR to fix 20 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • cyclic-dep/package.json
  • cyclic-dep/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Code Injection
SNYK-JS-LODASH-1040724
  239  
high severity Prototype Pollution
SNYK-JS-LODASH-567746
  189  
high severity Prototype Pollution
SNYK-JS-Y18N-1021887
  187  
high severity Prototype Pollution
SNYK-JS-LODASH-6139239
  170  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
  159  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238
  159  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
  159  
high severity Prototype Pollution
SNYK-JS-LODASH-450202
  152  
high severity Prototype Pollution
SNYK-JS-INI-1048974
  151  
high severity Prototype Pollution
SNYK-JS-LODASH-608086
  150  
high severity Prototype Pollution
SNYK-JS-LODASH-73638
  149  
medium severity Prototype Pollution
SNYK-JS-DOTPROP-543489
  140  
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764
  137  
medium severity Prototype Pollution
SNYK-JS-YARGSPARSER-560381
  137  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-73639
  133  
high severity Directory Traversal
SNYK-JS-MOMENT-2440688
  114  
medium severity Denial of Service (DoS)
npm:mem:20180117
  73  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
  63  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
  63  
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795
  59  
Release notes
Package name: @thebespokepixel/meta from @thebespokepixel/meta GitHub release notes
Package name: @thebespokepixel/string from @thebespokepixel/string GitHub release notes
Package name: read-pkg-up from read-pkg-up GitHub release notes
Package name: term-ng from term-ng GitHub release notes
Package name: truwrap from truwrap GitHub release notes
Package name: update-notifier from update-notifier GitHub release notes
Package name: verbosity from verbosity GitHub release notes
Package name: yargs
  • 17.6.0 - 2022-10-01

    17.6.0 (2022-10-01)

    Features

    Bug Fixes

    • deno: use 'globalThis' instead of 'window' (#2186) (#2215) (561fc7a)
    • deps: cliui with forced strip-ansi update (#2241) (38e8df1)
    • dont clobber description for multiple option calls (#2171) (f91d9b3)
    • typescript: address warning with objectKeys (394f5f8)
      </li>
      <li>
        <b>17.5.1</b> - <a href="https://github.com/yargs/yargs/releases/tag/v17.5.1">2022-05-16</a></br><h3><a href="https://github.com/yargs/yargs/compare/v17.5.0...v17.5.1">17.5.1</a> (2022-05-16)</h3>
    

    Bug Fixes

    • add missing entries to published files (#2185) (5685382)
    • address bug when strict and async middleware used together (#2164) (cbc2eb7)
    • completion: correct zsh installation instructions (22e9af2)
    • handle multiple node_modules folders determining mainFilename for ESM (#2123) (e0823dd)
    • lang: add missing terms to Russian translation (#2181) (1c331f2)
    • prevent infinite loop with empty locale (#2179) (b672e70)
    • veriadic arguments override array provided in config (the same as multiple dash arguments). (4dac5b8)
  • 17.5.0 - 2022-05-11

    17.5.0 (2022-05-11)

    Features

    • add browser.d.ts and check for existence of Error.captureStackTrace() (#2144) (6192990)

    Bug Fixes

    • completion: support for default flags (db35423)
    • import yargs/yargs in esm projects (#2151) (95aed1c)
  • 17.4.1 - 2022-04-09

    17.4.1 (2022-04-09)

    Bug Fixes

  • 17.4.0 - 2022-03-19

    17.4.0 (2022-03-19)

    Features

    • completion: choices will now work for all possible aliases of an option and not just the default long option (30edd50)
    • completion: positional arguments completion (#2090) (00e4ebb)

    Bug Fixes

    • completion: changed the check for option arguments to match options that begin with '-', instead of '--', to include short options (30edd50)
    • completion: fix for completions that contain non-leading hyphens (30edd50)
    • failed command usage string is missing arg descriptions and optional args (#2105) (d6e342d)
    • wrap unknown args in quotes (#2092) (6a29778)
  • 17.3.1 - 2021-12-23
  • 17.3.0 - 2021-11-30
  • 17.2.1 - 2021-09-25
  • 17.2.0 - 2021-09-23
  • 17.1.1 - 2021-08-13
  • 17.1.1-candidate.0 - 2021-08-13
  • 17.1.0 - 2021-08-04
  • 17.1.0-candidate.0 - 2021-07-15
  • 17.0.2-candidate.1 - 2021-07-15
  • 17.0.2-candidate - 2021-07-10
  • 17.0.1 - 2021-05-03
  • 17.0.0 - 2021-05-02
  • 17.0.0-candidate.13 - 2021-04-26
  • 17.0.0-candidate.12 - 2021-04-12
  • 17.0.0-candidate.11 - 2021-04-11
  • 17.0.0-candidate.10 - 2021-04-04
  • 17.0.0-candidate.9 - 2021-04-04
  • 17.0.0-candidate.8 - 2021-03-26
  • 17.0.0-candidate.7 - 2021-03-14
  • 17.0.0-candidate.6 - 2021-03-11
  • 17.0.0-candidate.5 - 2021-03-10
  • 17.0.0-candidate.4 - 2021-03-08
  • 17.0.0-candidate.3 - 2021-02-22
  • 17.0.0-candidate.2 - 2021-02-16
  • 17.0.0-candidate.1 - 2021-02-15
  • 17.0.0-candidate.0 - 2021-01-09
  • 16.2.0 - 2020-12-05
  • 16.1.1 - 2020-11-15
  • 16.1.0 - 2020-10-16
  • 16.0.4-candidate.0 - 2020-09-21
  • 16.0.3 - 2020-09-10
  • 16.0.2 - 2020-09-09
  • 16.0.1 - 2020-09-09
  • 16.0.0 - 2020-09-09
  • 16.0.0-beta.3 - 2020-09-08
  • 16.0.0-beta.2 - 2020-09-08
  • 16.0.0-beta.1 - 2020-08-27
  • 16.0.0-beta.0 - 2020-08-22
  • 16.0.0-alpha.3 - 2020-08-19
  • 16.0.0-alpha.2 - 2020-08-17
  • 16.0.0-alpha.1 - 2020-08-17
  • 16.0.0-alpha.0 - 2020-08-17
  • 15.5.0-candidate.0 - 2021-02-22
  • 15.4.1 - 2020-07-10
  • 15.4.0 - 2020-07-02
  • 15.4.0-beta.1 - 2020-07-01
  • 15.4.0-beta.0 - 2020-05-15
  • 15.3.2-beta.0 - 2020-04-17
  • 15.3.1 - 2020-03-16
  • 15.3.1-beta.0 - 2020-03-12
  • 15.3.0 - 2020-03-08
  • 15.3.0-beta.1 - 2020-03-08
  • 15.3.0-beta.0 - 2020-03-02
  • 15.2.0 - 2020-03-01
  • 15.2.0-beta.2 - 2020-03-01
  • 15.2.0-beta.1 - 2020-02-29
  • 15.2.0-beta.0 - 2020-02-24
  • 15.1.0 - 2020-01-02
  • 15.0.2 - 2019-11-19
  • 15.0.1 - 2019-11-16
  • 15.0.0 - 2019-11-10
  • 14.2.3 - 2020-03-13
  • 14.2.2 - 2019-11-19
  • 14.2.1 - 2019-10-30
  • 14.2.0 - 2019-10-07
  • 14.1.0 - 2019-09-06
  • 14.0.0 - 2019-07-30
  • 13.3.2 - 2020-03-13
  • 13.3.0 - 2019-06-10
  • 13.2.4 - 2019-05-13
  • 13.2.2 - 2019-03-06
  • 13.2.1 - 2019-02-18
  • 13.2.0 - 2019-02-15
  • 13.1.0 - 2019-02-12
  • 13.0.0-candidate.0 - 2019-02-02
  • 12.0.5 - 2018-11-19
  • 12.0.4 - 2018-11-10
  • 12.0.3-candidate.0 - 2018-10-06
  • 12.0.2 - 2018-09-04
  • 12.0.1 - 2018-06-29
  • 12.0.0 - 2018-06-26
  • 12.0.0-candidate.0 - 2018-04-04
  • 11.1.1 - 2019-10-07
  • 11.1.0 - 2018-03-04
from yargs GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 Code Injection
🦉 More lessons are available in Snyk Learn

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"@thebespokepixel/meta","from":"0.2.3","to":"3.0.0"},{"name":"@thebespokepixel/string","from":"0.5.2","to":"2.0.2"},{"name":"read-pkg-up","from":"4.0.0","to":"8.0.0"},{"name":"term-ng","from":"0.8.1","to":"3.0.4"},{"name":"truwrap","from":"0.8.1","to":"4.0.1"},{"name":"update-notifier","from":"2.5.0","to":"7.3.0"},{"name":"verbosity","from":"0.9.2","to":"3.0.3"},{"name":"yargs","from":"11.1.0","to":"17.6.0"}],"env":"prod","issuesToFix":[{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-ANSIREGEX-1583908","priority_score":159,"priority_score_factors":[{"name":"confidentiality","value":"none"},{"name":"integrity","value":"none"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00396},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Sep 12 2021 12:52:37 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":5.99},{"name":"likelihood","value":2.65},...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Hidden options are show during completion
2 participants