lonero-team/decentralized-internet

A SDK/library for decentralized web and distributing computing projects

Decentralized Internet 💻

| | | |

Why? 🙋

Currently, the internet as it stands is monopolized primarily towards central authorities, and relies heavily on outdated infrastructure such as telecom towers, routing systems, switches, etc. It is about time for an upgrade.

What? 😕

This repo is for an SDK and library for building decentralized web and distributed computing projects. Currently, we are trying to make a pipeline for a P2P Data transfer and syndication protocol. Currently, the main distribution method for this software is through NPM, and we have developed extensions, plugins, and capability for multiple other platforms as well.

Features 📋

Currently this can be utilized to:

• Build an offline centered network
• Setup your own blockchain infrastructure
• Setup services and micro-applications running on parallel processing instances
• Create a cryptocurrency sidechain utilizing Lotion or Tendermint consensus protocols

The NPM library is a collection of the following repos made for the purpose of building decentralized web projects:

lotion | bitcoin-peg | clusterpost | gridbee-framework | Reinvent-the-Internet

Also special thanks to: The Lonero Dev Team

• May need some updates in Seed Migration for some of the org repos

Papers worth checking out: Lonero Whitepaper (Original) | CrowdCoin Scientific Whitepaper

This NPM library/package is being mantained by the folks here

This project was created in order to support a new internet. One that is more open, free, and censorship-resistant in comparison to the old internet. An internet that eventually wouldn't need to rely on telecom towers, an outdated grid, or all these other "old school" forms of tech. We believe P2P compatibility is an important part of the future of the net. Grid Computing also plays a role in having a better means of transferring information in a speedy, more cost-efficient and reliable manner.

---

App to add GitHub metrics tracking to select repos here | BitBucket | Learning Lab

See original compatibility status update here | See NPM v.Updates

For Mac Users:

Sketch Plugin: wget https://git.io/Jv2pk

Latest Git Release Package here

License

decentralized-internet's Issues

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isequal:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.isequal:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isequal:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• snyk:1.362.1
        └─ @snyk/cli-interface:2.8.0
              └─ @snyk/dep-graph:1.19.0
                    └─ lodash.isequal:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of http-proxy:1.18.1

Vulnerabilities

DepShield reports that this application's usage of http-proxy:1.18.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

http-proxy:1.18.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ http-proxy:1.18.1
        └─ testem:3.2.0
              └─ http-proxy:1.18.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.clone:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.clone:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.clone:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• snyk:1.362.1
        └─ snyk-resolve-deps:4.4.0
              └─ lodash.clone:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isequal:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.isequal:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isequal:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• snyk:1.362.1
        └─ @snyk/cli-interface:2.8.0
              └─ @snyk/dep-graph:1.19.0
                    └─ lodash.isequal:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.uniqby:4.7.0

Vulnerabilities

DepShield reports that this application's usage of lodash.uniqby:4.7.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.uniqby:4.7.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ testem:3.2.0
              └─ lodash.uniqby:4.7.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:3.2.2

Vulnerabilities

DepShield reports that this application's usage of kind-of:3.2.2 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:3.2.2 is a transitive dependency introduced by the following direct dependency(s):

• ember-auto-import:1.6.0
        └─ webpack:4.28.4
              └─ watchpack:1.7.2
                    └─ watchpack-chokidar2:2.0.0
                          └─ chokidar:2.1.8
                                └─ braces:2.3.2
                                      └─ fill-range:4.0.0
                                            └─ is-number:3.0.0
                                                  └─ kind-of:3.2.2
              └─ micromatch:3.1.10
                    └─ snapdragon:0.8.2
                          └─ base:0.11.2
                                └─ cache-base:1.0.1
                                      └─ has-value:1.0.0
                                            └─ has-values:1.0.0
                                                  └─ is-number:3.0.0
                                                        └─ kind-of:3.2.2
                                      └─ to-object-path:0.3.0
                                            └─ kind-of:3.2.2
                                └─ class-utils:0.3.6
                                      └─ static-extend:0.1.2
                                            └─ object-copy:0.1.0
                                                  └─ kind-of:3.2.2
                          └─ define-property:0.2.5
                                └─ is-descriptor:0.1.6
                                      └─ is-accessor-descriptor:0.1.6
                                            └─ kind-of:3.2.2
                                      └─ is-data-descriptor:0.1.4
                                            └─ kind-of:3.2.2
                    └─ braces:2.3.2
                          └─ snapdragon-node:2.1.1
                                └─ snapdragon-util:3.0.1
                                      └─ kind-of:3.2.2
                          └─ fill-range:4.0.0
                                └─ is-number:3.0.0
                                      └─ kind-of:3.2.2

• ember-cli:3.19.0
        └─ find-yarn-workspace-root:1.2.1
              └─ micromatch:3.1.10
                    └─ braces:2.3.2
                          └─ fill-range:4.0.0
                                └─ is-number:3.0.0
                                      └─ kind-of:3.2.2
        └─ sane:4.1.0
              └─ micromatch:3.1.10
                    └─ braces:2.3.2
                          └─ fill-range:4.0.0
                                └─ is-number:3.0.0
                                      └─ kind-of:3.2.2

• grunt:1.2.1
        └─ grunt-cli:1.3.2
              └─ liftoff:2.5.0
                    └─ findup-sync:2.0.0
                          └─ micromatch:3.1.10
                                └─ braces:2.3.2
                                      └─ fill-range:4.0.0
                                            └─ is-number:3.0.0
                                                  └─ kind-of:3.2.2

• lerna:3.22.1
        └─ @lerna/add:3.21.0
              └─ @lerna/command:3.21.0
                    └─ @lerna/project:3.21.0
                          └─ globby:9.2.0
                                └─ fast-glob:2.2.7
                                      └─ micromatch:3.1.10
                                            └─ braces:2.3.2
                                                  └─ fill-range:4.0.0
                                                        └─ is-number:3.0.0
                                                              └─ kind-of:3.2.2
        └─ @lerna/create:3.22.0
              └─ globby:9.2.0
                    └─ fast-glob:2.2.7
                          └─ micromatch:3.1.10
                                └─ braces:2.3.2
                                      └─ fill-range:4.0.0
                                            └─ is-number:3.0.0
                                                  └─ kind-of:3.2.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash._baseassign:3.2.0

Vulnerabilities

DepShield reports that this application's usage of lodash._baseassign:3.2.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._baseassign:3.2.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash._baseassign:3.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of clean-css:3.4.28

Vulnerabilities

DepShield reports that this application's usage of clean-css:3.4.28 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

clean-css:3.4.28 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ ember-cli-preprocess-registry:3.3.0
              └─ broccoli-clean-css:1.1.0
                    └─ clean-css-promise:0.1.1
                          └─ clean-css:3.4.28

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.debounce:3.1.1

Vulnerabilities

DepShield reports that this application's usage of lodash.debounce:3.1.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.debounce:3.1.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ testem:3.2.0
              └─ fireworm:0.7.1
                    └─ lodash.debounce:3.1.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash._isiterateecall:3.0.9

Vulnerabilities

DepShield reports that this application's usage of lodash._isiterateecall:3.0.9 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._isiterateecall:3.0.9 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash._createassigner:3.1.1
                          └─ lodash._isiterateecall:3.0.9
        └─ testem:3.2.0
              └─ fireworm:0.7.1
                    └─ lodash.flatten:3.0.2
                          └─ lodash._isiterateecall:3.0.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of acorn:3.3.0

Vulnerabilities

DepShield reports that this application's usage of acorn:3.3.0 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

acorn:3.3.0 is a transitive dependency introduced by the following direct dependency(s):

• bigchaindb-driver:4.1.2
        └─ rewire:4.0.1
              └─ eslint:4.19.1
                    └─ espree:3.5.4
                          └─ acorn-jsx:3.0.1
                                └─ acorn:3.3.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Sites that do not respond correctly

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: [e.g. iOS]
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional context
Add any other context about the problem here.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.find:4.6.0

Vulnerabilities

DepShield reports that this application's usage of lodash.find:4.6.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.find:4.6.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ testem:3.2.0
              └─ lodash.find:4.6.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of acorn:6.4.1

Vulnerabilities

DepShield reports that this application's usage of acorn:6.4.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

acorn:6.4.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-auto-import:1.6.0
        └─ @embroider/core:0.4.3
              └─ jsdom:12.2.0
                    └─ acorn-globals:4.3.4
                          └─ acorn:6.4.1
                    └─ acorn:6.4.1

• ember-cli-eslint:5.1.0
        └─ broccoli-lint-eslint:5.0.0
              └─ eslint:5.16.0
                    └─ espree:5.0.1
                          └─ acorn:6.4.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.uniq:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.uniq:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.uniq:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ broccoli-concat:4.2.4
              └─ lodash.uniq:4.5.0

• ember-cli-eslint:5.1.0
        └─ broccoli-lint-eslint:5.0.0
              └─ broccoli-concat:3.7.5
                    └─ lodash.uniq:4.5.0

• lerna:3.22.1
        └─ @lerna/version:3.22.1
              └─ @lerna/github-client:3.22.0
                    └─ @octokit/rest:16.43.2
                          └─ lodash.uniq:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isarray:3.0.4

Vulnerabilities

DepShield reports that this application's usage of lodash.isarray:3.0.4 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isarray:3.0.4 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash.keys:3.1.2
                          └─ lodash.isarray:3.0.4
        └─ testem:3.2.0
              └─ fireworm:0.7.1
                    └─ lodash.flatten:3.0.2
                          └─ lodash._baseflatten:3.1.4
                                └─ lodash.isarray:3.0.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash._bindcallback:3.0.1

Vulnerabilities

DepShield reports that this application's usage of lodash._bindcallback:3.0.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._bindcallback:3.0.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash._createassigner:3.1.1
                          └─ lodash._bindcallback:3.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.set:4.3.2

Vulnerabilities

DepShield reports that this application's usage of lodash.set:4.3.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.set:4.3.2 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.22.1
        └─ @lerna/version:3.22.1
              └─ @lerna/github-client:3.22.0
                    └─ @octokit/rest:16.43.2
                          └─ lodash.set:4.3.2

• snyk:1.362.1
        └─ snyk-nodejs-lockfile-parser:1.26.3
              └─ lodash.set:4.3.2
        └─ snyk-resolve-deps:4.4.0
              └─ lodash.set:4.3.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash._createassigner:3.1.1

Vulnerabilities

DepShield reports that this application's usage of lodash._createassigner:3.1.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._createassigner:3.1.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash._createassigner:3.1.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isplainobject:4.0.6

Vulnerabilities

DepShield reports that this application's usage of lodash.isplainobject:4.0.6 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.isplainobject:4.0.6 is a transitive dependency introduced by the following direct dependency(s):

• @jupyterlab/notebook:2.2.0
        └─ @jupyterlab/apputils:2.2.0
              └─ sanitize-html:1.20.1
                    └─ lodash.isplainobject:4.0.6

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:4.0.0

Vulnerabilities

DepShield reports that this application's usage of kind-of:4.0.0 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:4.0.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-auto-import:1.6.0
        └─ webpack:4.28.4
              └─ micromatch:3.1.10
                    └─ snapdragon:0.8.2
                          └─ base:0.11.2
                                └─ cache-base:1.0.1
                                      └─ has-value:1.0.0
                                            └─ has-values:1.0.0
                                                  └─ kind-of:4.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.keys:3.1.2

Vulnerabilities

DepShield reports that this application's usage of lodash.keys:3.1.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.keys:3.1.2 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash._baseassign:3.2.0
                          └─ lodash.keys:3.1.2
                    └─ lodash.keys:3.1.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 6.1) Vulnerability due to usage of serialize-javascript:1.9.1

Vulnerabilities

DepShield reports that this application's usage of serialize-javascript:1.9.1 results in the following vulnerability(s):

• (CVSS 6.1) CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

---

Occurrences

serialize-javascript:1.9.1 is a transitive dependency introduced by the following direct dependency(s):

• bigchaindb-driver:4.1.2
        └─ uglifyjs-webpack-plugin:2.2.0
              └─ serialize-javascript:1.9.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.assignin:4.2.0

Vulnerabilities

DepShield reports that this application's usage of lodash.assignin:4.2.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.assignin:4.2.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ testem:3.2.0
              └─ lodash.assignin:4.2.0

• snyk:1.362.1
        └─ snyk-resolve-deps:4.4.0
              └─ lodash.assignin:4.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.assign:3.2.0

Vulnerabilities

DepShield reports that this application's usage of lodash.assign:3.2.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.assign:3.2.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Setup Airbrake for your Python application

Installation

Our Python error library (pybrake) requires Python 3.4+.

Python 2.7 users should follow the Python 2 instructions.

pip install -U pybrake

Configuration

(You can find your project ID and API key in your project's settings)

import pybrake


notifier = pybrake.Notifier(project_id=<Your project ID>,
                            project_key='<Your project API KEY>',
                            environment='production')

Send a test error

To test that you've installed Airbrake correctly, try triggering a test error.

try:
    raise ValueError('hello')
except Exception as err:
    notifier.notify(err)

For more information please visit our official GitHub repo.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.foreach:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.foreach:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.foreach:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-auto-import:1.6.0
        └─ @embroider/core:0.4.3
              └─ fast-sourcemap-concat:1.4.0
                    └─ sourcemap-validator:1.1.1
                          └─ lodash.foreach:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of q:1.5.1

Vulnerabilities

DepShield reports that this application's usage of q:1.5.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

---

Occurrences

q:1.5.1 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.22.1
        └─ @lerna/version:3.22.1
              └─ @lerna/conventional-commits:3.22.0
                    └─ conventional-changelog-angular:5.0.10
                          └─ q:1.5.1
                    └─ conventional-changelog-core:3.2.3
                          └─ q:1.5.1
                    └─ conventional-recommended-bump:5.0.1
                          └─ q:1.5.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.get:4.4.2

Vulnerabilities

DepShield reports that this application's usage of lodash.get:4.4.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.get:4.4.2 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.22.1
        └─ @lerna/version:3.22.1
              └─ @lerna/github-client:3.22.0
                    └─ @octokit/rest:16.43.2
                          └─ lodash.get:4.4.2

• lotion:0.4.27
        └─ lotion-connect:0.1.22
              └─ lodash.get:4.4.2

• snyk:1.362.1
        └─ snyk-resolve-deps:4.4.0
              └─ lodash.get:4.4.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isstring:4.0.1

Vulnerabilities

DepShield reports that this application's usage of lodash.isstring:4.0.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.isstring:4.0.1 is a transitive dependency introduced by the following direct dependency(s):

• @jupyterlab/notebook:2.2.0
        └─ @jupyterlab/apputils:2.2.0
              └─ sanitize-html:1.20.1
                    └─ lodash.isstring:4.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.assign:4.2.0

Vulnerabilities

DepShield reports that this application's usage of lodash.assign:4.2.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.assign:4.2.0 is a transitive dependency introduced by the following direct dependency(s):

• snyk:1.362.1
        └─ snyk-resolve-deps:4.4.0
              └─ lodash.assign:4.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.restparam:3.6.1

Vulnerabilities

DepShield reports that this application's usage of lodash.restparam:3.6.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.restparam:3.6.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash._createassigner:3.1.1
                          └─ lodash.restparam:3.6.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isarguments:3.1.0

Vulnerabilities

DepShield reports that this application's usage of lodash.isarguments:3.1.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isarguments:3.1.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash.keys:3.1.2
                          └─ lodash.isarguments:3.1.0
        └─ testem:3.2.0
              └─ fireworm:0.7.1
                    └─ lodash.flatten:3.0.2
                          └─ lodash._baseflatten:3.1.4
                                └─ lodash.isarguments:3.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.sortby:4.7.0

Vulnerabilities

DepShield reports that this application's usage of lodash.sortby:4.7.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.sortby:4.7.0 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.22.1
        └─ @lerna/create:3.22.0
              └─ whatwg-url:7.1.0
                    └─ lodash.sortby:4.7.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of acorn:5.7.4

Vulnerabilities

DepShield reports that this application's usage of acorn:5.7.4 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

acorn:5.7.4 is a transitive dependency introduced by the following direct dependency(s):

• bigchaindb-driver:4.1.2
        └─ rewire:4.0.1
              └─ eslint:4.19.1
                    └─ espree:3.5.4
                          └─ acorn:5.7.4

• ember-auto-import:1.6.0
        └─ webpack:4.28.4
              └─ acorn:5.7.4
              └─ acorn-dynamic-import:3.0.0
                    └─ acorn:5.7.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.flattendeep:4.4.0

Vulnerabilities

DepShield reports that this application's usage of lodash.flattendeep:4.4.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.flattendeep:4.4.0 is a transitive dependency introduced by the following direct dependency(s):

• grunt-contrib-nodeunit:2.1.0
        └─ nodeunit-x:0.13.0
              └─ tap:12.7.0
                    └─ nyc:14.1.1
                          └─ caching-transform:3.0.2
                                └─ package-hash:3.0.0
                                      └─ lodash.flattendeep:4.4.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash._reinterpolate:3.0.0

Vulnerabilities

DepShield reports that this application's usage of lodash._reinterpolate:3.0.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._reinterpolate:3.0.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ lodash.template:4.5.0
              └─ lodash._reinterpolate:3.0.0
              └─ lodash.templatesettings:4.2.0
                    └─ lodash._reinterpolate:3.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.omit:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.omit:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.omit:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ broccoli-concat:4.2.4
              └─ lodash.omit:4.5.0

• ember-cli-eslint:5.1.0
        └─ broccoli-lint-eslint:5.0.0
              └─ broccoli-concat:3.7.5
                    └─ lodash.omit:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of express:4.17.1

Vulnerabilities

DepShield reports that this application's usage of express:4.17.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

---

Occurrences

express:4.17.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ express:4.17.1
        └─ testem:3.2.0
              └─ express:4.17.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.flatten:4.4.0

Vulnerabilities

DepShield reports that this application's usage of lodash.flatten:4.4.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.flatten:4.4.0 is a transitive dependency introduced by the following direct dependency(s):

• snyk:1.362.1
        └─ snyk-resolve-deps:4.4.0
              └─ lodash.flatten:4.4.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash._basecopy:3.0.1

Vulnerabilities

DepShield reports that this application's usage of lodash._basecopy:3.0.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._basecopy:3.0.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash._baseassign:3.2.0
                          └─ lodash._basecopy:3.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.6.9

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

• @ember/optional-features:1.3.0
        └─ silent-error:1.1.1
              └─ debug:2.6.9

• broccoli-asset-rev:3.0.0
        └─ broccoli-persistent-filter:1.4.6
              └─ async-disk-cache:1.3.5
                    └─ debug:2.6.9
              └─ async-promise-queue:1.0.5
                    └─ debug:2.6.9
        └─ broccoli-filter:1.3.0
              └─ debug:2.6.9

• ember-auto-import:1.6.0
        └─ babel-core:6.26.3
              └─ debug:2.6.9
              └─ babel-traverse:6.26.0
                    └─ debug:2.6.9
        └─ broccoli-debug:0.6.5
              └─ tree-sync:1.4.0
                    └─ debug:2.6.9
        └─ webpack:4.28.4
              └─ micromatch:3.1.10
                    └─ extglob:2.0.4
                          └─ expand-brackets:2.1.4
                                └─ debug:2.6.9
                    └─ snapdragon:0.8.2
                          └─ debug:2.6.9

• ember-cli:3.19.0
        └─ broccoli:3.4.2
              └─ connect:3.7.0
                    └─ debug:2.6.9
        └─ broccoli-config-loader:1.0.1
              └─ broccoli-caching-writer:3.0.3
                    └─ debug:2.6.9
        └─ broccoli-config-replace:1.1.2
              └─ debug:2.6.9
        └─ broccoli-funnel:2.0.2
              └─ debug:2.6.9
        └─ compression:1.7.4
              └─ debug:2.6.9
        └─ express:4.17.1
              └─ body-parser:1.19.0
                    └─ debug:2.6.9
              └─ debug:2.6.9
              └─ finalhandler:1.1.2
                    └─ debug:2.6.9
              └─ send:0.17.1
                    └─ debug:2.6.9
        └─ heimdalljs-logger:0.1.10
              └─ debug:2.6.9
        └─ leek:0.0.24
              └─ debug:2.6.9
        └─ morgan:1.10.0
              └─ debug:2.6.9

• ember-cli-sri:2.1.1
        └─ broccoli-sri-hash:2.1.2
              └─ broccoli-caching-writer:2.3.1
                    └─ debug:2.6.9

• ember-cli-template-lint:2.0.2
        └─ broccoli-persistent-filter:2.3.1
              └─ sync-disk-cache:1.3.4
                    └─ debug:2.6.9

• ember-maybe-import-regenerator:0.1.6
        └─ broccoli-funnel:1.2.0
              └─ debug:2.6.9
        └─ ember-cli-babel:6.18.0
              └─ broccoli-babel-transpiler:6.5.1
                    └─ broccoli-funnel:2.0.2
                          └─ debug:2.6.9
              └─ broccoli-funnel:2.0.2
                    └─ debug:2.6.9

• grunt-contrib-nodeunit:2.1.0
        └─ nodeunit-x:0.13.0
              └─ tap:12.7.0
                    └─ tap-mocha-reporter:3.0.9
                          └─ debug:2.6.9

• lotion:0.4.27
        └─ discovery-channel:5.5.1
              └─ debug:2.6.9
              └─ dns-discovery:6.2.3
                    └─ debug:2.6.9

• snyk:1.362.1
        └─ proxy-agent:3.1.1
              └─ pac-proxy-agent:3.0.1
                    └─ get-uri:2.0.4
                          └─ debug:2.6.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash._getnative:3.9.1

Vulnerabilities

DepShield reports that this application's usage of lodash._getnative:3.9.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._getnative:3.9.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ leek:0.0.24
              └─ lodash.assign:3.2.0
                    └─ lodash.keys:3.1.2
                          └─ lodash._getnative:3.9.1
        └─ testem:3.2.0
              └─ fireworm:0.7.1
                    └─ lodash.debounce:3.1.1
                          └─ lodash._getnative:3.9.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.clonedeep:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.clonedeep:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.clonedeep:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• @jupyterlab/notebook:2.2.0
        └─ @jupyterlab/apputils:2.2.0
              └─ sanitize-html:1.20.1
                    └─ lodash.clonedeep:4.5.0

• ember-cli:3.19.0
        └─ testem:3.2.0
              └─ lodash.clonedeep:4.5.0

• lerna:3.22.1
        └─ @lerna/publish:3.22.1
              └─ @lerna/npm-publish:3.18.5
                    └─ @evocateur/libnpmpublish:1.2.2
                          └─ lodash.clonedeep:4.5.0

• snyk:1.362.1
        └─ snyk-nodejs-lockfile-parser:1.26.3
              └─ lodash.clonedeep:4.5.0
        └─ snyk-policy:1.14.1
              └─ lodash.clonedeep:4.5.0
        └─ snyk-try-require:1.3.1
              └─ lodash.clonedeep:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.escaperegexp:4.1.2

Vulnerabilities

DepShield reports that this application's usage of lodash.escaperegexp:4.1.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.escaperegexp:4.1.2 is a transitive dependency introduced by the following direct dependency(s):

• @jupyterlab/notebook:2.2.0
        └─ @jupyterlab/apputils:2.2.0
              └─ sanitize-html:1.20.1
                    └─ lodash.escaperegexp:4.1.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:5.1.0

Vulnerabilities

DepShield reports that this application's usage of kind-of:5.1.0 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:5.1.0 is a transitive dependency introduced by the following direct dependency(s):

• ember-auto-import:1.6.0
        └─ webpack:4.28.4
              └─ micromatch:3.1.10
                    └─ snapdragon:0.8.2
                          └─ define-property:0.2.5
                                └─ is-descriptor:0.1.6
                                      └─ kind-of:5.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isempty:4.4.0

Vulnerabilities

DepShield reports that this application's usage of lodash.isempty:4.4.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isempty:4.4.0 is a transitive dependency introduced by the following direct dependency(s):

• snyk:1.362.1
        └─ snyk-nodejs-lockfile-parser:1.26.3
              └─ lodash.isempty:4.4.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash._baseflatten:3.1.4

Vulnerabilities

DepShield reports that this application's usage of lodash._baseflatten:3.1.4 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._baseflatten:3.1.4 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ testem:3.2.0
              └─ fireworm:0.7.1
                    └─ lodash.flatten:3.0.2
                          └─ lodash._baseflatten:3.1.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 8.8) Vulnerability due to usage of minimist:0.2.1

Vulnerabilities

DepShield reports that this application's usage of minimist:0.2.1 results in the following vulnerability(s):

• (CVSS 8.8) CWE-94: Improper Control of Generation of Code ('Code Injection')

---

Occurrences

minimist:0.2.1 is a transitive dependency introduced by the following direct dependency(s):

• ember-cli:3.19.0
        └─ bower-config:1.4.3
              └─ minimist:0.2.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

DepShield encountered errors while building your project

The project could not be analyzed because of build errors. Please review the error messages here. Another build will be scheduled within 24 hours. If the build is successful this issue will be closed, otherwise the error message will be updated.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}