Update yarn.lock by try-panwiac · Pull Request #17 · try-panwiac/front-end

try-panwiac · 2023-01-16T07:12:48Z

No description provided.

prisma-cloud-devsecops

Prisma Cloud has found errors in this PR ⬇️

prisma-cloud-devsecops · 2023-01-16T07:13:46Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


express 4.14.0 / yarn.lock

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-24999 HIGH 7 4.17.3 Open

prisma-cloud-devsecops · 2023-01-16T07:13:46Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


brace-expansion 1.1.6 / yarn.lock

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2017-18077 HIGH 7 1.1.7 Open

prisma-cloud-devsecops · 2023-01-16T07:13:46Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


fresh 0.3.0 / yarn.lock

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2017-16119 HIGH 7.5 0.5.2 Open

prisma-cloud-devsecops · 2023-01-16T07:13:46Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


hawk 3.1.3 / yarn.lock

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-29167 HIGH 7.5 9.0.1 Open

prisma-cloud-devsecops · 2023-01-16T07:13:46Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


base64-url 1.3.3 / yarn.lock

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

GHSA-j4mr-9xw3-c9jx HIGH 7 2.0.0 Open

prisma-cloud-devsecops · 2023-01-16T07:13:48Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


json-schema 0.2.3 / yarn.lock

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-3918 CRITICAL 9 0.4.0 Open

prisma-cloud-devsecops · 2023-01-16T07:13:49Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


ajv 4.11.8 / yarn.lock

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-15366 LOW 4 6.12.3 Open

prisma-cloud-devsecops · 2023-01-16T07:13:49Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


debug 2.2.0 / yarn.lock

Total vulnerabilities: 2

Critical: 0 High: 1 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2017-20165 HIGH 7.5 3.1.0 Open

CVE-2017-16137 MEDIUM 5.3 2.6.9 Open

prisma-cloud-devsecops · 2023-01-16T07:13:49Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


handlebars 4.5.1 / yarn.lock

Total vulnerabilities: 6

Critical: 2 High: 4 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-23369 CRITICAL 9.8 4.7.7 Open

CVE-2021-23383 CRITICAL 9.8 4.7.7 Open

CVE-2019-20920 HIGH 8.1 4.5.3 Open

GHSA-2cf5-4w76-r9qv HIGH 7 4.5.2 Open

GHSA-g9r4-xpmj-mj65 HIGH 7 4.5.3 Open

GHSA-q2c6-c6pm-g3gh HIGH 7 4.5.3 Open

prisma-cloud-devsecops · 2023-01-16T07:13:49Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


diff 1.4.0 / yarn.lock

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

GHSA-h6ch-v84p-w6p9 HIGH 7 3.5.0 Open

prisma-cloud-devsecops · 2023-01-16T07:14:53Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


bintrees 1.0.1 / yarn.lock

Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

prisma-cloud-devsecops · 2023-01-16T07:14:54Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


bytes 0.2.1 / yarn.lock

Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

prisma-cloud-devsecops · 2023-01-16T07:14:55Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


chai-http 3.0.0 / yarn.lock

Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

prisma-cloud-devsecops · 2023-01-16T07:14:56Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


extsprintf 1.0.2 / yarn.lock

Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

prisma-cloud-devsecops · 2023-01-16T07:14:57Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


formatio 1.1.1 / yarn.lock

Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

prisma-cloud-devsecops · 2023-01-16T07:14:58Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


formidable 1.0.17 / yarn.lock

Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

prisma-cloud-devsecops · 2023-01-16T07:14:59Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


jsonify 0.0.1 / yarn.lock

Unknown License (Public Domain)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

prisma-cloud-devsecops · 2023-01-16T07:15:00Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


ms 0.7.1 / yarn.lock

Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

prisma-cloud-devsecops · 2023-01-16T07:15:01Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


optimist 0.6.1 / yarn.lock

Noncompliant License (X11)

This package contains a license that is not OSI-approved.

prisma-cloud-devsecops · 2023-01-16T07:15:02Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


samsam 1.1.2 / yarn.lock

Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

prisma-cloud-devsecops · 2023-01-16T07:15:03Z

yarn.lock

  resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.9.tgz#73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
  dependencies:
-    sprintf-js "~1.0.2"
+    sprintf-js "~1.0.2" 


verror 1.3.6 / yarn.lock

Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

Update yarn.lock

71b2c6b

prisma-cloud-devsecops bot reviewed Jan 16, 2023

View reviewed changes

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2017-20165	HIGH	7.5	`3.1.0`	Open
CVE-2017-16137	MEDIUM	5.3	`2.6.9`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2021-23369	CRITICAL	9.8	`4.7.7`	Open
CVE-2021-23383	CRITICAL	9.8	`4.7.7`	Open
CVE-2019-20920	HIGH	8.1	`4.5.3`	Open
GHSA-2cf5-4w76-r9qv	HIGH	7	`4.5.2`	Open
GHSA-g9r4-xpmj-mj65	HIGH	7	`4.5.3`	Open
GHSA-q2c6-c6pm-g3gh	HIGH	7	`4.5.3`	Open

Conversation

try-panwiac commented Jan 16, 2023

Uh oh!

prisma-cloud-devsecops bot left a comment

Choose a reason for hiding this comment

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

express 4.14.0 / yarn.lock

Total vulnerabilities: 1

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

brace-expansion 1.1.6 / yarn.lock

Total vulnerabilities: 1

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

fresh 0.3.0 / yarn.lock

Total vulnerabilities: 1

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

hawk 3.1.3 / yarn.lock

Total vulnerabilities: 1

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

base64-url 1.3.3 / yarn.lock

Total vulnerabilities: 1

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

json-schema 0.2.3 / yarn.lock

Total vulnerabilities: 1

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

ajv 4.11.8 / yarn.lock

Total vulnerabilities: 1

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

debug 2.2.0 / yarn.lock

Total vulnerabilities: 2

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

handlebars 4.5.1 / yarn.lock

Total vulnerabilities: 6

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

diff 1.4.0 / yarn.lock

Total vulnerabilities: 1

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

bintrees 1.0.1 / yarn.lock

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

bytes 0.2.1 / yarn.lock

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

chai-http 3.0.0 / yarn.lock

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

extsprintf 1.0.2 / yarn.lock

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

formatio 1.1.1 / yarn.lock

Uh oh!

prisma-cloud-devsecops bot Jan 16, 2023

Choose a reason for hiding this comment

formidable 1.0.17 / yarn.lock

prisma-cloud-devsecops bot Jan 16, 2023 •

edited

Loading