forked from p2bauer/flightplan
-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
Many of the js libraries used by flightplan are deprecated, and a few are set to a version with vulnerabilities.
npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
# npm audit report
csv-parse <4.4.6
Severity: high
Regular Expression Denial of Service - https://npmjs.com/advisories/1171
No fix available
node_modules/csv-parse
flightplan-tool >=0.2.0
Depends on vulnerable versions of csv-parse
node_modules/flightplan-tool
lodash <=4.17.20
Severity: high
Prototype Pollution - https://npmjs.com/advisories/1523
Command Injection - https://npmjs.com/advisories/1673
fix available via `npm audit fix`
node_modules/external-ip/node_modules/lodash
y18n <3.2.2||=4.0.0||>=5.0.0 <5.0.5
Severity: high
Prototype Pollution - https://npmjs.com/advisories/1654
fix available via `npm audit fix`
node_modules/external-ip/node_modules/y18n
Metadata
Metadata
Assignees
Labels
No labels