jscs-dev/grunt-jscs

Fix security issues from dependencies

jlchereau opened this issue · 1 comments

                                                                                
  Moderate        Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.11                                                     
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > jscs > jscs-jsdoc > jsdoctypeparser > lodash     
                                                                                
  More info       https://npmjs.com/advisories/782                              
                                                                                
                                                                                
  Moderate        Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.11                                                     
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > jscs > lodash                                    
                                                                                
  More info       https://npmjs.com/advisories/782                              
                                                                                
                                                                                
  Moderate        Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.11                                                     
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > jscs > xmlbuilder > lodash                       
                                                                                
  More info       https://npmjs.com/advisories/782                              
                                                                                
                                                                                
  Moderate        Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.11                                                     
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > lodash                                           
                                                                                
  More info       https://npmjs.com/advisories/782                              
                                                                                
                                                                                
  Low             Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.5                                                      
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > jscs > jscs-jsdoc > jsdoctypeparser > lodash     
                                                                                
  More info       https://npmjs.com/advisories/577                              
                                                                                
                                                                                
  Low             Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.5                                                      
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > jscs > lodash                                    
                                                                                
  More info       https://npmjs.com/advisories/577                              
                                                                                
                                                                                
  Low             Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.5                                                      
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > jscs > xmlbuilder > lodash                       
                                                                                
  More info       https://npmjs.com/advisories/577                              
                                                                                
                                                                                
  Low             Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.5                                                      
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > lodash                                           
                                                                                
  More info       https://npmjs.com/advisories/577                              
                                                                                
                                                                                
  Moderate        Denial of Service                                             
                                                                                
  Package         js-yaml                                                       
                                                                                
  Patched in      >=3.13.0                                                      
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > jscs > js-yaml                                   
                                                                                
  More info       https://npmjs.com/advisories/788                              
                                                                                
                                                                                
  High            Code Injection                                                
                                                                                
  Package         js-yaml                                                       
                                                                                
  Patched in      >=3.13.1                                                      
                                                                                
  Dependency of   grunt-jscs [dev]                                              
                                                                                
  Path            grunt-jscs > jscs > js-yaml                                   
                                                                                
  More info       https://npmjs.com/advisories/813       

Thanks for getting in touch!
However, please note that this package has been unmaintained since 2016. You should move on to ESLint 😞