catchpoint/WebPageTest.api-nodejs

npm audit and vulnerabilities

Kudratullah opened this issue · 0 comments

Same as #128 upon fresh installation of the latest version 0.6.0 reports vulnerabilities due to older version of mocha

Result of npm audit

# npm audit report

minimatch  <3.0.5
Severity: high
minimatch ReDoS vulnerability - https://github.com/advisories/GHSA-f8q6-p94x-37v3
fix available via `npm audit fix`
node_modules/minimatch
  mocha  5.1.0 - 9.2.1
  Depends on vulnerable versions of minimatch
  Depends on vulnerable versions of nanoid
  node_modules/mocha

nanoid  3.0.0 - 3.1.30
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
fix available via `npm audit fix`
node_modules/nanoid

3 vulnerabilities (1 moderate, 2 high)

Thanks :)