Security Report
The Security Check found 16 vulnerabilities.
CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue |
---|---|---|---|---|---|
WS-2017-3772Vulnerable Source Files: ❌ /packages/osd-ui-framework/node_modules/underscore.string/unescapeHTML.js |
High | 7.5 | juice-shopjuice-shop-15.3.0_node20_win32_x64 | Upgrade to version: underscore.string - 3.3.5 | #4734 |
CVE-2024-39338Path to dependency file: /package.json Path to vulnerable library: /node_modules/axios/package.json Dependency Hierarchy: -> chromedriver-121.0.2.tgz (Root Library) -> ❌ axios-1.7.2.tgz (Vulnerable Library) |
High | 7.5 | axios-1.7.2.tgz | Upgrade to version: axios - 1.7.4 | #7682 |
CVE-2020-11023Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium | 6.9 | jquery-1.11.1.js | Upgrade to version: jquery - 3.5.0;jquery-rails - 4.4.0 | #4732 |
CVE-2020-11022Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium | 6.9 | jquery-1.11.1.js | Upgrade to version: jQuery - 3.5.0 | #4733 |
CVE-2023-26487Path to dependency file: /node_modules/leaflet-vega/demo/demo.html Path to vulnerable library: /node_modules/leaflet-vega/demo/demo.html Dependency Hierarchy: -> ❌ vega-5.22.1.js (Vulnerable Library) |
Medium | 6.5 | vega-5.22.1.js | Upgrade to version: vega - 5.23.0, vega-functions - 5.13.1 | #3525 |
CVE-2023-26486Path to dependency file: /node_modules/leaflet-vega/demo/demo.html Path to vulnerable library: /node_modules/leaflet-vega/demo/demo.html Dependency Hierarchy: -> ❌ vega-5.22.1.js (Vulnerable Library) |
Medium | 6.5 | vega-5.22.1.js | Upgrade to version: vega - 5.23.0, vega-functions - 5.13.1 | #3526 |
CVE-2023-28155Path to dependency file: /package.json Path to vulnerable library: /node_modules/@cypress/request/package.json Dependency Hierarchy: -> cypress-9.5.4.tgz (Root Library) -> ❌ request-2.88.12.tgz (Vulnerable Library) |
Medium | 6.1 | request-2.88.12.tgz | Upgrade to version: @cypress/request - 3.0.0 | #5893 |
CVE-2019-8331Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium | 6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.1,4.3.1;bootstrap-sass - 3.4.1,4.3.1 | #4722 |
CVE-2019-11358Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium | 6.1 | jquery-1.11.1.js | Upgrade to version: jquery - 3.4.0 | #4730 |
CVE-2018-20677Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium | 6.1 | bootstrap-3.3.7.min.js | Upgrade to version: Bootstrap - v3.4.0;NorDroN.AngularTemplate - 0.1.6;Dynamic.NET.Express.ProjectTemplates - 0.8.0;dotnetng.template - 1.0.0.4;ZNxtApp.Core.Module.Theme - 1.0.9-Beta;JMeter - 5.0.0 | #4725 |
CVE-2018-20676Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium | 6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0 | #4728 |
CVE-2018-14042Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium | 6.1 | bootstrap-3.3.7.min.js | Upgrade to version: org.webjars.npm:bootstrap:4.1.2.org.webjars:bootstrap:3.4.0 | #4727 |
CVE-2016-10735Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium | 6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0, 4.0.0-beta.2 | #4729 |
CVE-2015-9251Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium | 6.1 | jquery-1.11.1.js | Upgrade to version: jQuery - 3.0.0 | #4736 |
CVE-2023-44270Path to dependency file: /package.json Path to vulnerable library: /node_modules/postcss/package.json Dependency Hierarchy: -> ❌ postcss-8.4.12.tgz (Vulnerable Library) |
Medium | 5.3 | postcss-8.4.12.tgz | Upgrade to version: postcss - 8.4.31 | #5178 |
CVE-2018-14040Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Low | 3.7 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0,4.1.2 | #4723 |
Total libraries scanned: 2506
Scan token: ddb7ae8406634ef49da082c0ec90c49b