{ "@intervolga/optimize-cssnano-plugin": { "name": "@intervolga/optimize-cssnano-plugin", "severity": "moderate", "isDirect": false, "via": [ "cssnano", "cssnano-preset-default", "postcss" ], "effects": [ ], "range": "*", "nodes": [ "node_modules/@intervolga/optimize-cssnano-plugin" ], "fixAvailable": true }, "@riophae/vue-treeselect": { "name": "@riophae/vue-treeselect", "severity": "low", "isDirect": true, "via": [ "vue" ], "effects": [ ], "range": "*", "nodes": [ "node_modules/@riophae/vue-treeselect" ], "fixAvailable": false }, "@types/webpack-dev-server": { "name": "@types/webpack-dev-server", "severity": "high", "isDirect": false, "via": [ "http-proxy-middleware" ], "effects": [ ], "range": "3.11.2 - 4.0.3", "nodes": [ "node_modules/@types/webpack-dev-server" ], "fixAvailable": true }, "@vue/cli-plugin-babel": { "name": "@vue/cli-plugin-babel", "severity": "moderate", "isDirect": true, "via": [ "@vue/cli-service", "@vue/cli-shared-utils" ], "effects": [ ], "range": "\u003e=3.4.0", "nodes": [ "node_modules/@vue/cli-plugin-babel" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "@vue/cli-plugin-eslint": { "name": "@vue/cli-plugin-eslint", "severity": "high", "isDirect": true, "via": [ "@vue/cli-service", "@vue/cli-shared-utils", "inquirer", "yorkie" ], "effects": [ ], "range": "*", "nodes": [ "node_modules/@vue/cli-plugin-eslint" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "@vue/cli-plugin-router": { "name": "@vue/cli-plugin-router", "severity": "moderate", "isDirect": false, "via": [ "@vue/cli-service", "@vue/cli-shared-utils" ], "effects": [ "@vue/cli-service" ], "range": "*", "nodes": [ "node_modules/@vue/cli-plugin-router" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "@vue/cli-plugin-vuex": { "name": "@vue/cli-plugin-vuex", "severity": "moderate", "isDirect": false, "via": [ "@vue/cli-service" ], "effects": [ "@vue/cli-service" ], "range": "*", "nodes": [ "node_modules/@vue/cli-plugin-vuex" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "@vue/cli-service": { "name": "@vue/cli-service", "severity": "critical", "isDirect": true, "via": [ "@intervolga/optimize-cssnano-plugin", "@vue/cli-plugin-router", "@vue/cli-plugin-vuex", "@vue/cli-shared-utils", "@vue/component-compiler-utils", "autoprefixer", "css-loader", "cssnano", "html-webpack-plugin", "postcss-loader", "vue-loader", "vue-template-compiler", "webpack-dev-server" ], "effects": [ "@vue/cli-plugin-babel", "@vue/cli-plugin-eslint", "@vue/cli-plugin-router", "@vue/cli-plugin-vuex" ], "range": "*", "nodes": [ "node_modules/@vue/cli-service" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "@vue/cli-shared-utils": { "name": "@vue/cli-shared-utils", "severity": "moderate", "isDirect": false, "via": [ "request" ], "effects": [ "@vue/cli-plugin-babel", "@vue/cli-plugin-eslint", "@vue/cli-plugin-router" ], "range": "\u003c=4.5.19", "nodes": [ "node_modules/@vue/cli-shared-utils" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "@vue/component-compiler-utils": { "name": "@vue/component-compiler-utils", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ "@vue/cli-service", "vue-loader" ], "range": "*", "nodes": [ "node_modules/@vue/component-compiler-utils" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "autoprefixer": { "name": "autoprefixer", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "1.0.20131222 - 9.8.8", "nodes": [ "node_modules/autoprefixer" ], "fixAvailable": true }, "bonjour": { "name": "bonjour", "severity": "high", "isDirect": false, "via": [ "multicast-dns" ], "effects": [ "webpack-dev-server" ], "range": "\u003e=3.3.1", "nodes": [ "node_modules/bonjour" ], "fixAvailable": true }, "cross-spawn": { "name": "cross-spawn", "severity": "high", "isDirect": false, "via": [ { "source": 1104663, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": [ "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "\u003c6.0.6" } ], "effects": [ "execa" ], "range": "\u003c6.0.6", "nodes": [ "node_modules/yorkie/node_modules/cross-spawn" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "css-declaration-sorter": { "name": "css-declaration-sorter", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=5.1.2", "nodes": [ "node_modules/css-declaration-sorter" ], "fixAvailable": true }, "css-loader": { "name": "css-loader", "severity": "moderate", "isDirect": false, "via": [ "icss-utils", "postcss", "postcss-modules-extract-imports", "postcss-modules-local-by-default", "postcss-modules-scope", "postcss-modules-values" ], "effects": [ "@vue/cli-service" ], "range": "0.15.0 - 4.3.0", "nodes": [ "node_modules/css-loader" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "cssnano": { "name": "cssnano", "severity": "moderate", "isDirect": false, "via": [ "cssnano-preset-default", "postcss" ], "effects": [ "@intervolga/optimize-cssnano-plugin", "@vue/cli-service" ], "range": "\u003c=4.1.11", "nodes": [ "node_modules/cssnano" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "cssnano-preset-default": { "name": "cssnano-preset-default", "severity": "moderate", "isDirect": false, "via": [ "css-declaration-sorter", "cssnano-util-raw-cache", "postcss", "postcss-calc", "postcss-colormin", "postcss-convert-values", "postcss-discard-comments", "postcss-discard-duplicates", "postcss-discard-empty", "postcss-discard-overridden", "postcss-merge-longhand", "postcss-merge-rules", "postcss-minify-font-values", "postcss-minify-gradients", "postcss-minify-params", "postcss-minify-selectors", "postcss-normalize-charset", "postcss-normalize-display-values", "postcss-normalize-positions", "postcss-normalize-repeat-style", "postcss-normalize-string", "postcss-normalize-timing-functions", "postcss-normalize-unicode", "postcss-normalize-url", "postcss-normalize-whitespace", "postcss-ordered-values", "postcss-reduce-initial", "postcss-reduce-transforms", "postcss-svgo", "postcss-unique-selectors" ], "effects": [ "cssnano" ], "range": "\u003c=4.0.8", "nodes": [ "node_modules/cssnano-preset-default" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "cssnano-util-raw-cache": { "name": "cssnano-util-raw-cache", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "*", "nodes": [ "node_modules/cssnano-util-raw-cache" ], "fixAvailable": true }, "dns-packet": { "name": "dns-packet", "severity": "high", "isDirect": false, "via": [ "ip" ], "effects": [ "multicast-dns" ], "range": "\u003c=5.2.4", "nodes": [ "node_modules/dns-packet" ], "fixAvailable": true }, "element-ui": { "name": "element-ui", "severity": "low", "isDirect": true, "via": [ "vue" ], "effects": [ ], "range": "\u003e=1.0.0-rc.1", "nodes": [ "node_modules/element-ui" ], "fixAvailable": { "name": "element-ui", "version": "0.2.6", "isSemVerMajor": true } }, "eslint": { "name": "eslint", "severity": "low", "isDirect": true, "via": [ "inquirer" ], "effects": [ ], "range": "4.0.0-alpha.0 - 7.2.0", "nodes": [ "node_modules/eslint" ], "fixAvailable": { "name": "eslint", "version": "9.39.1", "isSemVerMajor": true } }, "execa": { "name": "execa", "severity": "high", "isDirect": false, "via": [ "cross-spawn" ], "effects": [ "yorkie" ], "range": "0.5.0 - 0.9.0", "nodes": [ "node_modules/yorkie/node_modules/execa" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "external-editor": { "name": "external-editor", "severity": "low", "isDirect": false, "via": [ "tmp" ], "effects": [ "inquirer" ], "range": "\u003e=1.1.1", "nodes": [ "node_modules/external-editor" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "form-data": { "name": "form-data", "severity": "critical", "isDirect": false, "via": [ { "source": 1109540, "name": "form-data", "dependency": "form-data", "title": "form-data uses unsafe random function in form-data for choosing boundary", "url": "https://github.com/advisories/GHSA-fjxv-7rqg-78g4", "severity": "critical", "cwe": [ "CWE-330" ], "cvss": { "score": 0, "vectorString": null }, "range": "\u003c2.5.4" } ], "effects": [ "request" ], "range": "\u003c2.5.4", "nodes": [ "node_modules/request/node_modules/form-data" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "html-minifier": { "name": "html-minifier", "severity": "high", "isDirect": false, "via": [ { "source": 1105440, "name": "html-minifier", "dependency": "html-minifier", "title": "kangax html-minifier REDoS vulnerability", "url": "https://github.com/advisories/GHSA-pfq8-rq6v-vf5m", "severity": "high", "cwe": [ "CWE-400", "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "\u003c=4.0.0" } ], "effects": [ "html-webpack-plugin" ], "range": "*", "nodes": [ "node_modules/html-minifier" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "html-webpack-plugin": { "name": "html-webpack-plugin", "severity": "critical", "isDirect": false, "via": [ "html-minifier", "loader-utils" ], "effects": [ "@vue/cli-service", "svg-sprite-loader" ], "range": "1.4.0 - 4.0.0-beta.14", "nodes": [ "node_modules/@vue/cli-service/node_modules/html-webpack-plugin", "node_modules/svg-sprite-loader/node_modules/html-webpack-plugin" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "http-proxy-middleware": { "name": "http-proxy-middleware", "severity": "high", "isDirect": false, "via": [ { "source": 1100223, "name": "http-proxy-middleware", "dependency": "http-proxy-middleware", "title": "Denial of service in http-proxy-middleware", "url": "https://github.com/advisories/GHSA-c7qv-q95q-8v27", "severity": "high", "cwe": [ "CWE-400" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "\u003c2.0.7" }, { "source": 1104105, "name": "http-proxy-middleware", "dependency": "http-proxy-middleware", "title": "http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed", "url": "https://github.com/advisories/GHSA-9gqv-wp59-fq42", "severity": "moderate", "cwe": [ "CWE-754" ], "cvss": { "score": 4, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N" }, "range": "\u003e=1.3.0 \u003c2.0.9" }, { "source": 1104106, "name": "http-proxy-middleware", "dependency": "http-proxy-middleware", "title": "http-proxy-middleware can call writeBody twice because \"else if\" is not used", "url": "https://github.com/advisories/GHSA-4www-5p9h-95mh", "severity": "moderate", "cwe": [ "CWE-670" ], "cvss": { "score": 4, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" }, "range": "\u003e=1.3.0 \u003c2.0.8" } ], "effects": [ "@types/webpack-dev-server", "webpack-dev-server" ], "range": "\u003c=2.0.8", "nodes": [ "node_modules/http-proxy-middleware", "node_modules/webpack-dev-server/node_modules/http-proxy-middleware" ], "fixAvailable": true }, "icss-utils": { "name": "icss-utils", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ "css-loader", "postcss-modules-local-by-default", "postcss-modules-values" ], "range": "\u003c=4.1.1", "nodes": [ "node_modules/icss-utils" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "inquirer": { "name": "inquirer", "severity": "low", "isDirect": false, "via": [ "external-editor" ], "effects": [ "@vue/cli-plugin-eslint", "eslint" ], "range": "3.0.0 - 8.2.6 || 9.0.0 - 9.3.7", "nodes": [ "node_modules/inquirer" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "ip": { "name": "ip", "severity": "high", "isDirect": false, "via": [ { "source": 1101851, "name": "ip", "dependency": "ip", "title": "ip SSRF improper categorization in isPublic", "url": "https://github.com/advisories/GHSA-2p57-rm9w-gvfp", "severity": "high", "cwe": [ "CWE-918" ], "cvss": { "score": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "range": "\u003c=2.0.1" } ], "effects": [ "dns-packet", "webpack-dev-server" ], "range": "*", "nodes": [ "node_modules/ip" ], "fixAvailable": true }, "json5": { "name": "json5", "severity": "high", "isDirect": false, "via": [ { "source": 1096543, "name": "json5", "dependency": "json5", "title": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "severity": "high", "cwe": [ "CWE-1321" ], "cvss": { "score": 7.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H" }, "range": "\u003c1.0.2" } ], "effects": [ "loader-utils" ], "range": "\u003c1.0.2", "nodes": [ "node_modules/@vue/cli-service/node_modules/json5", "node_modules/svg-sprite-loader/node_modules/html-webpack-plugin/node_modules/json5" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "loader-utils": { "name": "loader-utils", "severity": "critical", "isDirect": false, "via": [ { "source": 1094088, "name": "loader-utils", "dependency": "loader-utils", "title": "Prototype pollution in webpack loader-utils", "url": "https://github.com/advisories/GHSA-76p3-8jx3-jpfq", "severity": "critical", "cwe": [ "CWE-1321" ], "cvss": { "score": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "range": "\u003c1.4.1" }, "json5" ], "effects": [ "html-webpack-plugin" ], "range": "\u003c=1.4.0", "nodes": [ "node_modules/@vue/cli-service/node_modules/loader-utils", "node_modules/svg-sprite-loader/node_modules/html-webpack-plugin/node_modules/loader-utils" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "lodash": { "name": "lodash", "severity": "critical", "isDirect": false, "via": [ { "source": 1106913, "name": "lodash", "dependency": "lodash", "title": "Command Injection in lodash", "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "severity": "high", "cwe": [ "CWE-77", "CWE-94" ], "cvss": { "score": 7.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, "range": "\u003c4.17.21" }, { "source": 1106918, "name": "lodash", "dependency": "lodash", "title": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-jf85-cpcp-j695", "severity": "critical", "cwe": [ "CWE-20", "CWE-1321" ], "cvss": { "score": 9.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, "range": "\u003c4.17.12" }, { "source": 1106920, "name": "lodash", "dependency": "lodash", "title": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-p6mc-m468-83gw", "severity": "high", "cwe": [ "CWE-770", "CWE-1321" ], "cvss": { "score": 7.4, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" }, "range": "\u003e=3.7.0 \u003c4.17.19" }, { "source": 1108258, "name": "lodash", "dependency": "lodash", "title": "Regular Expression Denial of Service (ReDoS) in lodash", "url": "https://github.com/advisories/GHSA-29mw-wpgm-hmr9", "severity": "moderate", "cwe": [ "CWE-400", "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "\u003e=4.0.0 \u003c4.17.21" } ], "effects": [ "microcli" ], "range": "\u003c=4.17.20", "nodes": [ "node_modules/microcli/node_modules/lodash" ], "fixAvailable": { "name": "runjs", "version": "4.1.3", "isSemVerMajor": true } }, "microcli": { "name": "microcli", "severity": "high", "isDirect": false, "via": [ "lodash" ], "effects": [ "runjs" ], "range": "\u003e=1.1.0", "nodes": [ "node_modules/microcli" ], "fixAvailable": { "name": "runjs", "version": "4.1.3", "isSemVerMajor": true } }, "multicast-dns": { "name": "multicast-dns", "severity": "high", "isDirect": false, "via": [ "dns-packet" ], "effects": [ "bonjour" ], "range": "6.0.0 - 7.2.2", "nodes": [ "node_modules/multicast-dns" ], "fixAvailable": true }, "postcss": { "name": "postcss", "severity": "moderate", "isDirect": false, "via": [ { "source": 1093539, "name": "postcss", "dependency": "postcss", "title": "Regular Expression Denial of Service in postcss", "url": "https://github.com/advisories/GHSA-566m-qj78-rww5", "severity": "moderate", "cwe": [ "CWE-400" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "\u003c7.0.36" }, { "source": 1109574, "name": "postcss", "dependency": "postcss", "title": "PostCSS line return parsing error", "url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "severity": "moderate", "cwe": [ "CWE-74", "CWE-144" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, "range": "\u003c8.4.31" } ], "effects": [ "@intervolga/optimize-cssnano-plugin", "@vue/component-compiler-utils", "autoprefixer", "css-declaration-sorter", "css-loader", "cssnano", "cssnano-preset-default", "cssnano-util-raw-cache", "icss-utils", "postcss-calc", "postcss-colormin", "postcss-convert-values", "postcss-discard-comments", "postcss-discard-duplicates", "postcss-discard-empty", "postcss-discard-overridden", "postcss-loader", "postcss-merge-longhand", "postcss-merge-rules", "postcss-minify-font-values", "postcss-minify-gradients", "postcss-minify-params", "postcss-minify-selectors", "postcss-modules-extract-imports", "postcss-modules-local-by-default", "postcss-modules-scope", "postcss-modules-values", "postcss-normalize-charset", "postcss-normalize-display-values", "postcss-normalize-positions", "postcss-normalize-repeat-style", "postcss-normalize-string", "postcss-normalize-timing-functions", "postcss-normalize-unicode", "postcss-normalize-url", "postcss-normalize-whitespace", "postcss-ordered-values", "postcss-reduce-initial", "postcss-reduce-transforms", "postcss-svgo", "postcss-unique-selectors", "stylehacks", "svg-baker" ], "range": "\u003c=8.4.30", "nodes": [ "node_modules/postcss", "node_modules/svg-baker/node_modules/postcss" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "postcss-calc": { "name": "postcss-calc", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "4.1.0 - 7.0.5", "nodes": [ "node_modules/postcss-calc" ], "fixAvailable": true }, "postcss-colormin": { "name": "postcss-colormin", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.3", "nodes": [ "node_modules/postcss-colormin" ], "fixAvailable": true }, "postcss-convert-values": { "name": "postcss-convert-values", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.1", "nodes": [ "node_modules/postcss-convert-values" ], "fixAvailable": true }, "postcss-discard-comments": { "name": "postcss-discard-comments", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-discard-comments" ], "fixAvailable": true }, "postcss-discard-duplicates": { "name": "postcss-discard-duplicates", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "1.1.0 - 4.0.2", "nodes": [ "node_modules/postcss-discard-duplicates" ], "fixAvailable": true }, "postcss-discard-empty": { "name": "postcss-discard-empty", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "1.1.0 - 4.0.1", "nodes": [ "node_modules/postcss-discard-empty" ], "fixAvailable": true }, "postcss-discard-overridden": { "name": "postcss-discard-overridden", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.1", "nodes": [ "node_modules/postcss-discard-overridden" ], "fixAvailable": true }, "postcss-loader": { "name": "postcss-loader", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.1", "nodes": [ "node_modules/postcss-loader" ], "fixAvailable": true }, "postcss-merge-longhand": { "name": "postcss-merge-longhand", "severity": "moderate", "isDirect": false, "via": [ "postcss", "stylehacks" ], "effects": [ ], "range": "\u003c=4.0.11", "nodes": [ "node_modules/postcss-merge-longhand" ], "fixAvailable": true }, "postcss-merge-rules": { "name": "postcss-merge-rules", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.3", "nodes": [ "node_modules/postcss-merge-rules" ], "fixAvailable": true }, "postcss-minify-font-values": { "name": "postcss-minify-font-values", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-minify-font-values" ], "fixAvailable": true }, "postcss-minify-gradients": { "name": "postcss-minify-gradients", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-minify-gradients" ], "fixAvailable": true }, "postcss-minify-params": { "name": "postcss-minify-params", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-minify-params" ], "fixAvailable": true }, "postcss-minify-selectors": { "name": "postcss-minify-selectors", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-minify-selectors" ], "fixAvailable": true }, "postcss-modules-extract-imports": { "name": "postcss-modules-extract-imports", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=2.0.0", "nodes": [ "node_modules/postcss-modules-extract-imports" ], "fixAvailable": true }, "postcss-modules-local-by-default": { "name": "postcss-modules-local-by-default", "severity": "moderate", "isDirect": false, "via": [ "icss-utils", "postcss" ], "effects": [ ], "range": "\u003c=4.0.0-rc.4", "nodes": [ "node_modules/postcss-modules-local-by-default" ], "fixAvailable": true }, "postcss-modules-scope": { "name": "postcss-modules-scope", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=2.2.0", "nodes": [ "node_modules/postcss-modules-scope" ], "fixAvailable": true }, "postcss-modules-values": { "name": "postcss-modules-values", "severity": "moderate", "isDirect": false, "via": [ "icss-utils", "postcss" ], "effects": [ "css-loader" ], "range": "\u003c=4.0.0-rc.5", "nodes": [ "node_modules/postcss-modules-values" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "postcss-normalize-charset": { "name": "postcss-normalize-charset", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.1", "nodes": [ "node_modules/postcss-normalize-charset" ], "fixAvailable": true }, "postcss-normalize-display-values": { "name": "postcss-normalize-display-values", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-normalize-display-values" ], "fixAvailable": true }, "postcss-normalize-positions": { "name": "postcss-normalize-positions", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-normalize-positions" ], "fixAvailable": true }, "postcss-normalize-repeat-style": { "name": "postcss-normalize-repeat-style", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-normalize-repeat-style" ], "fixAvailable": true }, "postcss-normalize-string": { "name": "postcss-normalize-string", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-normalize-string" ], "fixAvailable": true }, "postcss-normalize-timing-functions": { "name": "postcss-normalize-timing-functions", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-normalize-timing-functions" ], "fixAvailable": true }, "postcss-normalize-unicode": { "name": "postcss-normalize-unicode", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.1", "nodes": [ "node_modules/postcss-normalize-unicode" ], "fixAvailable": true }, "postcss-normalize-url": { "name": "postcss-normalize-url", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "1.1.0 - 4.0.1", "nodes": [ "node_modules/postcss-normalize-url" ], "fixAvailable": true }, "postcss-normalize-whitespace": { "name": "postcss-normalize-whitespace", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-normalize-whitespace" ], "fixAvailable": true }, "postcss-ordered-values": { "name": "postcss-ordered-values", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.1.2", "nodes": [ "node_modules/postcss-ordered-values" ], "fixAvailable": true }, "postcss-reduce-initial": { "name": "postcss-reduce-initial", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.3", "nodes": [ "node_modules/postcss-reduce-initial" ], "fixAvailable": true }, "postcss-reduce-transforms": { "name": "postcss-reduce-transforms", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.2", "nodes": [ "node_modules/postcss-reduce-transforms" ], "fixAvailable": true }, "postcss-svgo": { "name": "postcss-svgo", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.3", "nodes": [ "node_modules/postcss-svgo" ], "fixAvailable": true }, "postcss-unique-selectors": { "name": "postcss-unique-selectors", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ ], "range": "\u003c=4.0.1", "nodes": [ "node_modules/postcss-unique-selectors" ], "fixAvailable": true }, "request": { "name": "request", "severity": "critical", "isDirect": false, "via": [ { "source": 1096727, "name": "request", "dependency": "request", "title": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "severity": "moderate", "cwe": [ "CWE-918" ], "cvss": { "score": 6.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, "range": "\u003c=2.88.2" }, "form-data", "tough-cookie" ], "effects": [ "@vue/cli-shared-utils" ], "range": "*", "nodes": [ "node_modules/request" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "runjs": { "name": "runjs", "severity": "high", "isDirect": true, "via": [ "microcli" ], "effects": [ ], "range": "\u003e=4.2.0", "nodes": [ "node_modules/runjs" ], "fixAvailable": { "name": "runjs", "version": "4.1.3", "isSemVerMajor": true } }, "stylehacks": { "name": "stylehacks", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ "postcss-merge-longhand" ], "range": "\u003c=4.0.3", "nodes": [ "node_modules/stylehacks" ], "fixAvailable": true }, "svg-baker": { "name": "svg-baker", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ "svg-baker-runtime", "svg-sprite-loader" ], "range": "\u003e=1.2.5", "nodes": [ "node_modules/svg-baker" ], "fixAvailable": { "name": "svg-sprite-loader", "version": "5.2.1", "isSemVerMajor": false } }, "svg-baker-runtime": { "name": "svg-baker-runtime", "severity": "moderate", "isDirect": false, "via": [ "svg-baker" ], "effects": [ "svg-sprite-loader" ], "range": "\u003e=1.4.0-alpha.10475b37", "nodes": [ "node_modules/svg-baker-runtime" ], "fixAvailable": { "name": "svg-sprite-loader", "version": "5.2.1", "isSemVerMajor": false } }, "svg-sprite-loader": { "name": "svg-sprite-loader", "severity": "critical", "isDirect": true, "via": [ "html-webpack-plugin", "svg-baker", "svg-baker-runtime" ], "effects": [ ], "range": "\u003e=2.0.4", "nodes": [ "node_modules/svg-sprite-loader" ], "fixAvailable": { "name": "svg-sprite-loader", "version": "5.2.1", "isSemVerMajor": false } }, "tmp": { "name": "tmp", "severity": "low", "isDirect": false, "via": [ { "source": 1109537, "name": "tmp", "dependency": "tmp", "title": "tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter", "url": "https://github.com/advisories/GHSA-52f5-9888-hmc6", "severity": "low", "cwe": [ "CWE-59" ], "cvss": { "score": 2.5, "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" }, "range": "\u003c=0.2.3" } ], "effects": [ "external-editor" ], "range": "\u003c=0.2.3", "nodes": [ "node_modules/tmp" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "tough-cookie": { "name": "tough-cookie", "severity": "moderate", "isDirect": false, "via": [ { "source": 1097682, "name": "tough-cookie", "dependency": "tough-cookie", "title": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "severity": "moderate", "cwe": [ "CWE-1321" ], "cvss": { "score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, "range": "\u003c4.1.3" } ], "effects": [ "request" ], "range": "\u003c4.1.3", "nodes": [ "node_modules/tough-cookie" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } }, "vue": { "name": "vue", "severity": "low", "isDirect": true, "via": [ { "source": 1100238, "name": "vue", "dependency": "vue", "title": "ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function", "url": "https://github.com/advisories/GHSA-5j4c-8p2g-v4jx", "severity": "low", "cwe": [ "CWE-1333" ], "cvss": { "score": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "\u003e=2.0.0-alpha.1 \u003c3.0.0-alpha.0" } ], "effects": [ "@riophae/vue-treeselect", "element-ui", "vuex" ], "range": "2.0.0-alpha.1 - 2.7.16", "nodes": [ "node_modules/vue" ], "fixAvailable": { "name": "element-ui", "version": "0.2.6", "isSemVerMajor": true } }, "vue-loader": { "name": "vue-loader", "severity": "moderate", "isDirect": false, "via": [ "@vue/component-compiler-utils" ], "effects": [ ], "range": "15.0.0-beta.1 - 15.11.1", "nodes": [ "node_modules/vue-loader" ], "fixAvailable": true }, "vue-template-compiler": { "name": "vue-template-compiler", "severity": "moderate", "isDirect": true, "via": [ { "source": 1098721, "name": "vue-template-compiler", "dependency": "vue-template-compiler", "title": "vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)", "url": "https://github.com/advisories/GHSA-g3ch-rx76-35fx", "severity": "moderate", "cwe": [ "CWE-79" ], "cvss": { "score": 4.2, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" }, "range": "\u003e=2.0.0 \u003c3.0.0" } ], "effects": [ "@vue/cli-service" ], "range": "\u003e=2.0.0", "nodes": [ "node_modules/vue-template-compiler" ], "fixAvailable": { "name": "@vue/cli-plugin-babel", "version": "5.0.9", "isSemVerMajor": true } }, "vuex": { "name": "vuex", "severity": "low", "isDirect": true, "via": [ "vue" ], "effects": [ ], "range": "3.1.3 - 3.6.2", "nodes": [ "node_modules/vuex" ], "fixAvailable": { "name": "vuex", "version": "4.1.0", "isSemVerMajor": true } }, "webpack-dev-server": { "name": "webpack-dev-server", "severity": "high", "isDirect": false, "via": [ { "source": 1108429, "name": "webpack-dev-server", "dependency": "webpack-dev-server", "title": "webpack-dev-server users\u0027 source code may be stolen when they access a malicious web site with non-Chromium based browser", "url": "https://github.com/advisories/GHSA-9jgg-88mc-972h", "severity": "moderate", "cwe": [ "CWE-346" ], "cvss": { "score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, "range": "\u003c=5.2.0" }, { "source": 1108430, "name": "webpack-dev-server", "dependency": "webpack-dev-server", "title": "webpack-dev-server users\u0027 source code may be stolen when they access a malicious web site", "url": "https://github.com/advisories/GHSA-4v9v-hfq4-rm2v", "severity": "moderate", "cwe": [ "CWE-749" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, "range": "\u003c=5.2.0" }, "bonjour", "http-proxy-middleware", "ip" ], "effects": [ ], "range": "\u003c=5.2.0", "nodes": [ "node_modules/webpack-dev-server" ], "fixAvailable": true }, "yorkie": { "name": "yorkie", "severity": "high", "isDirect": false, "via": [ "execa" ], "effects": [ "@vue/cli-plugin-eslint" ], "range": "*", "nodes": [ "node_modules/yorkie" ], "fixAvailable": { "name": "@vue/cli-plugin-eslint", "version": "5.0.9", "isSemVerMajor": true } } }