The angular-architecture-graph from lucalanca

[DepShield] (CVSS 6.5) Vulnerability due to usage of hoek:0.9.1

Vulnerabilities

DepShield reports that this application's usage of hoek:0.9.1 results in the following vulnerability(s):

(CVSS 6.5) [CVE-2018-3728] Improper Access Control

Occurrences

hoek:0.9.1 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ request:2.42.0
                    └─ hawk:1.1.1
                          └─ boom:0.4.2
                                └─ hoek:0.9.1
                          └─ hoek:0.9.1
                          └─ sntp:0.2.4
                                └─ hoek:0.9.1

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ request:2.36.0
                    └─ hawk:1.0.0
                          └─ boom:0.4.2
                                └─ hoek:0.9.1
                          └─ hoek:0.9.1
                          └─ sntp:0.2.4
                                └─ hoek:0.9.1
        └─ request:2.36.0
              └─ hawk:1.0.0
                    └─ boom:0.4.2
                          └─ hoek:0.9.1
                    └─ hoek:0.9.1
                    └─ sntp:0.2.4
                          └─ hoek:0.9.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of hawk:1.0.0

Vulnerabilities

DepShield reports that this application's usage of hawk:1.0.0 results in the following vulnerability(s):

(CVSS 7.5) [CVE-2016-2515] Resource Management Errors
(CVSS 5.3) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

hawk:1.0.0 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ request:2.36.0
                    └─ hawk:1.0.0
        └─ request:2.36.0
              └─ hawk:1.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of semver:2.3.0

Vulnerabilities

DepShield reports that this application's usage of semver:2.3.0 results in the following vulnerability(s):

(CVSS 7.5) [CVE-2015-8855] Resource Management Errors
(CVSS 5.3) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

semver:2.3.0 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ init-package-json:1.0.0
                    └─ semver:2.3.0
              └─ node-gyp:1.0.1
                    └─ semver:2.3.0
              └─ npm-install-checks:1.0.2
                    └─ semver:2.3.0
              └─ npm-registry-client:2.0.7
                    └─ semver:2.3.0
              └─ npmconf:1.1.8
                    └─ semver:2.3.0
              └─ read-installed:2.0.5
                    └─ semver:2.3.0
              └─ read-package-json:1.2.7
                    └─ normalize-package-data:1.0.1
                          └─ semver:2.3.0
              └─ semver:2.3.0

• nodegit:0.1.4
└─ node-pre-gyp:0.5.16
└─ semver:2.3.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of semver:2.2.1

Vulnerabilities

DepShield reports that this application's usage of semver:2.2.1 results in the following vulnerability(s):

(CVSS 7.5) [CVE-2015-8855] Resource Management Errors
(CVSS 5.3) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

semver:2.2.1 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.1.4
└─ node-gyp:0.13.1
└─ semver:2.2.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Support for Providers

[DepShield] (CVSS 7.4) Vulnerability due to usage of npmconf:1.1.8

Vulnerabilities

DepShield reports that this application's usage of npmconf:1.1.8 results in the following vulnerability(s):

(CVSS 7.4) CWE-125: Out-of-bounds Read

Occurrences

npmconf:1.1.8 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
└─ npm:1.4.29
└─ npmconf:1.1.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of tough-cookie:0.12.1

Vulnerabilities

DepShield reports that this application's usage of tough-cookie:0.12.1 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
(CVSS 7.5) CWE-185: Incorrect Regular Expression

Occurrences

tough-cookie:0.12.1 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ request:2.42.0
                    └─ tough-cookie:0.12.1

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ request:2.36.0
                    └─ tough-cookie:0.12.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of mime:1.2.11

Vulnerabilities

DepShield reports that this application's usage of mime:1.2.11 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

mime:1.2.11 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ request:2.42.0
                    └─ form-data:0.1.4
                          └─ mime:1.2.11

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ request:2.36.0
                    └─ form-data:0.1.2
                          └─ mime:1.2.11
                    └─ mime:1.2.11
        └─ request:2.36.0
              └─ form-data:0.1.4
                    └─ mime:1.2.11
              └─ mime:1.2.11

• q-io:1.13.6
└─ mime:1.2.11

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Support for Directives

[DepShield] (CVSS 8.2) Vulnerability due to usage of tunnel-agent:0.4.3

Vulnerabilities

DepShield reports that this application's usage of tunnel-agent:0.4.3 results in the following vulnerability(s):

(CVSS 8.2) CWE-20: Improper Input Validation

Occurrences

tunnel-agent:0.4.3 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.1.4
└─ request:2.36.0
└─ tunnel-agent:0.4.3

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash:1.0.2

Vulnerabilities

DepShield reports that this application's usage of lodash:1.0.2 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

lodash:1.0.2 is a transitive dependency introduced by the following direct dependency(s):

• grunt-contrib-watch:0.6.1
        └─ gaze:0.5.2
              └─ globule:0.1.0
                    └─ lodash:1.0.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of qs:0.6.6

Vulnerabilities

DepShield reports that this application's usage of qs:0.6.6 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
(CVSS 5.0) [CVE-2014-7191] Resource Management Errors

Occurrences

qs:0.6.6 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ request:2.36.0
                    └─ qs:0.6.6
        └─ request:2.36.0
              └─ qs:0.6.6

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Support for Filters

[DepShield] (CVSS 7.5) Vulnerability due to usage of tar:0.1.20

Vulnerabilities

DepShield reports that this application's usage of tar:0.1.20 results in the following vulnerability(s):

(CVSS 7.5) [CVE-2015-8860] Improper Link Resolution Before File Access ("Link Following")
(CVSS 7.5) Symlink Arbitrary File Overwrite

Occurrences

tar:0.1.20 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.1.4
        └─ node-gyp:0.13.1
              └─ tar:0.1.20
        └─ tar:0.1.20

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 8.2) Vulnerability due to usage of bl:0.9.1

Vulnerabilities

DepShield reports that this application's usage of bl:0.9.1 results in the following vulnerability(s):

(CVSS 8.2) CWE-20: Improper Input Validation

Occurrences

bl:0.9.1 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ request:2.42.0
                    └─ bl:0.9.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 5.2) Vulnerability due to usage of stringstream:0.0.4

Vulnerabilities

DepShield reports that this application's usage of stringstream:0.0.4 results in the following vulnerability(s):

(CVSS 5.2) CWE-125: Out-of-bounds Read

Occurrences

stringstream:0.0.4 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ request:2.42.0
                    └─ stringstream:0.0.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 5.3) Vulnerability due to usage of request:2.36.0

Vulnerabilities

DepShield reports that this application's usage of request:2.36.0 results in the following vulnerability(s):

(CVSS 5.3) CWE-201: Information Exposure Through Sent Data

Occurrences

request:2.36.0 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.1.4
        └─ node-gyp:0.13.1
              └─ request:2.36.0
        └─ node-pre-gyp:0.5.16
              └─ request:2.36.0
        └─ request:2.36.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

ES6 support

Was wondering if this actually supports app written in Angular 1.5 component style using ES6?

GaryB432/gulp-ng-dgml#2

[DepShield] (CVSS 4.2) Vulnerability due to usage of node-uuid:1.4.1

Vulnerabilities

DepShield reports that this application's usage of node-uuid:1.4.1 results in the following vulnerability(s):

(CVSS 4.2) CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Occurrences

node-uuid:1.4.1 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ request:2.42.0
                    └─ node-uuid:1.4.1

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ request:2.36.0
                    └─ node-uuid:1.4.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 8.8) Vulnerability due to usage of growl:1.8.1

Vulnerabilities

DepShield reports that this application's usage of growl:1.8.1 results in the following vulnerability(s):

(CVSS 8.8) CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Occurrences

growl:1.8.1 is a transitive dependency introduced by the following direct dependency(s):

• mocha:1.21.5
└─ growl:1.8.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of hawk:1.1.1

Vulnerabilities

DepShield reports that this application's usage of hawk:1.1.1 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
(CVSS 7.5) [CVE-2016-2515] Resource Management Errors
(CVSS 5.3) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

hawk:1.1.1 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ request:2.42.0
                    └─ hawk:1.1.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of semver:3.0.1

Vulnerabilities

DepShield reports that this application's usage of semver:3.0.1 results in the following vulnerability(s):

(CVSS 7.5) [CVE-2015-8855] Resource Management Errors
(CVSS 5.3) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

semver:3.0.1 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
└─ npmi:0.0.12
└─ semver:3.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash:0.9.2

Vulnerabilities

DepShield reports that this application's usage of lodash:0.9.2 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

lodash:0.9.2 is a transitive dependency introduced by the following direct dependency(s):

• grunt:0.4.5
        └─ grunt-legacy-util:0.2.0
              └─ lodash:0.9.2
        └─ lodash:0.9.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Unit test with real projects

[DepShield] (CVSS 7.5) Vulnerability due to usage of qs:0.5.6

Vulnerabilities

DepShield reports that this application's usage of qs:0.5.6 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
(CVSS 5.0) [CVE-2014-7191] Resource Management Errors

Occurrences

qs:0.5.6 is a transitive dependency introduced by the following direct dependency(s):

• grunt-contrib-watch:0.6.1
└─ tiny-lr-fork:0.0.5
└─ qs:0.5.6

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 8.8) Vulnerability due to usage of growl:1.7.0

Vulnerabilities

DepShield reports that this application's usage of growl:1.7.0 results in the following vulnerability(s):

(CVSS 8.8) CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Occurrences

growl:1.7.0 is a transitive dependency introduced by the following direct dependency(s):

• grunt-mocha-test:0.10.2
└─ mocha:1.18.2
└─ growl:1.7.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash:2.4.2

Vulnerabilities

DepShield reports that this application's usage of lodash:2.4.2 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

lodash:2.4.2 is a transitive dependency introduced by the following direct dependency(s):

• grunt:0.4.5
        └─ findup-sync:0.1.3
              └─ lodash:2.4.2
        └─ grunt-legacy-log:0.1.3
              └─ grunt-legacy-log-utils:0.1.1
                    └─ lodash:2.4.2
              └─ lodash:2.4.2

• grunt-contrib-watch:0.6.1
└─ lodash:2.4.2

• load-grunt-config:0.13.2
        └─ load-grunt-tasks:0.3.0
              └─ globule:0.2.0
                    └─ lodash:2.4.2

• lodash:2.4.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 5.3) Vulnerability due to usage of ms:0.6.2

Vulnerabilities

DepShield reports that this application's usage of ms:0.6.2 results in the following vulnerability(s):

(CVSS 5.3) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

ms:0.6.2 is a transitive dependency introduced by the following direct dependency(s):

• mocha:1.21.5
└─ debug:2.0.0
└─ ms:0.6.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 9.8) Vulnerability due to usage of cryptiles:0.2.2

Vulnerabilities

DepShield reports that this application's usage of cryptiles:0.2.2 results in the following vulnerability(s):

(CVSS 9.8) [CVE-2018-1000620] Insufficient Entropy

Occurrences

cryptiles:0.2.2 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ request:2.42.0
                    └─ hawk:1.1.1
                          └─ cryptiles:0.2.2

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ request:2.36.0
                    └─ hawk:1.0.0
                          └─ cryptiles:0.2.2
        └─ request:2.36.0
              └─ hawk:1.0.0
                    └─ cryptiles:0.2.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of debug:0.7.4

Vulnerabilities

DepShield reports that this application's usage of debug:0.7.4 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

debug:0.7.4 is a transitive dependency introduced by the following direct dependency(s):

• grunt-contrib-watch:0.6.1
└─ tiny-lr-fork:0.0.5
└─ debug:0.7.4

• grunt-mocha-test:0.10.2
└─ mocha:1.18.2
└─ debug:0.7.4

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ tar-pack:2.0.0
                    └─ debug:0.7.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

DepShield Deprecation Notice

Depshield will be deprecated on Monday December 12th

Please install our new product, Sonatype Lift with advanced features

[DepShield] (CVSS 7.5) Vulnerability due to usage of tar:1.0.1

Vulnerabilities

DepShield reports that this application's usage of tar:1.0.1 results in the following vulnerability(s):

(CVSS 7.5) [CVE-2015-8860] Improper Link Resolution Before File Access ("Link Following")
(CVSS 7.5) Symlink Arbitrary File Overwrite

Occurrences

tar:1.0.1 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ node-gyp:1.0.1
                    └─ tar:1.0.1
              └─ tar:1.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of tar:0.1.19

Vulnerabilities

DepShield reports that this application's usage of tar:0.1.19 results in the following vulnerability(s):

(CVSS 7.5) [CVE-2015-8860] Improper Link Resolution Before File Access ("Link Following")
(CVSS 7.5) Symlink Arbitrary File Overwrite

Occurrences

tar:0.1.19 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ tar:0.1.19
              └─ tar-pack:2.0.0
                    └─ tar:0.1.19

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of npm:1.4.29

Vulnerabilities

DepShield reports that this application's usage of npm:1.4.29 results in the following vulnerability(s):

(CVSS 7.5) [CVE-2016-3956] Information Exposure
(CVSS 6.8) CWE-200: Information Exposure

Occurrences

npm:1.4.29 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
        └─ npmi:0.0.12
              └─ npm:1.4.29

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 9.8) Vulnerability due to usage of deep-extend:0.2.10

Vulnerabilities

DepShield reports that this application's usage of deep-extend:0.2.10 results in the following vulnerability(s):

(CVSS 9.8) [CVE-2018-3750] Improper Input Validation
(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

deep-extend:0.2.10 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ rc:0.4.0
                    └─ deep-extend:0.2.10

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.0.0

Vulnerabilities

DepShield reports that this application's usage of debug:2.0.0 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

debug:2.0.0 is a transitive dependency introduced by the following direct dependency(s):

• mocha:1.21.5
└─ debug:2.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 8.2) Vulnerability due to usage of tunnel-agent:0.4.0

Vulnerabilities

DepShield reports that this application's usage of tunnel-agent:0.4.0 results in the following vulnerability(s):

(CVSS 8.2) CWE-20: Improper Input Validation

Occurrences

tunnel-agent:0.4.0 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ request:2.42.0
                    └─ tunnel-agent:0.4.0

• nodegit:0.1.4
        └─ node-pre-gyp:0.5.16
              └─ request:2.36.0
                    └─ tunnel-agent:0.4.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 5.3) Vulnerability due to usage of request:2.42.0

Vulnerabilities

DepShield reports that this application's usage of request:2.42.0 results in the following vulnerability(s):

(CVSS 5.3) CWE-201: Information Exposure Through Sent Data

Occurrences

request:2.42.0 is a transitive dependency introduced by the following direct dependency(s):

• grunt-publish:0.0.5
        └─ npm:1.4.29
              └─ node-gyp:1.0.1
                    └─ request:2.42.0
              └─ npm-registry-client:2.0.7
                    └─ request:2.42.0
              └─ request:2.42.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

lucalanca / angular-architecture-graph Goto Github PK

angular-architecture-graph's People

Contributors

Stargazers

Watchers

Forkers

angular-architecture-graph's Issues

Depshield will be deprecated on Monday December 12th

Recommend Projects

Recommend Topics

Recommend Org