Convert backend/web from submodule to regular directory
This commit is contained in:
@@ -0,0 +1,382 @@
|
||||
{
|
||||
"auditReportVersion": 2,
|
||||
"vulnerabilities": {
|
||||
"@chevrotain/cst-dts-gen": {
|
||||
"name": "@chevrotain/cst-dts-gen",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
"@chevrotain/gast",
|
||||
"lodash"
|
||||
],
|
||||
"effects": [
|
||||
"chevrotain"
|
||||
],
|
||||
"range": "10.0.0 - 10.5.0",
|
||||
"nodes": [
|
||||
"node_modules/@chevrotain/cst-dts-gen"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "auth",
|
||||
"version": "1.2.3",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"@chevrotain/gast": {
|
||||
"name": "@chevrotain/gast",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
"lodash"
|
||||
],
|
||||
"effects": [
|
||||
"@chevrotain/cst-dts-gen",
|
||||
"chevrotain"
|
||||
],
|
||||
"range": "<=10.5.0",
|
||||
"nodes": [
|
||||
"node_modules/@chevrotain/gast"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "auth",
|
||||
"version": "1.2.3",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"@esbuild-kit/core-utils": {
|
||||
"name": "@esbuild-kit/core-utils",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
"esbuild"
|
||||
],
|
||||
"effects": [
|
||||
"@esbuild-kit/esm-loader"
|
||||
],
|
||||
"range": "*",
|
||||
"nodes": [
|
||||
"node_modules/@esbuild-kit/core-utils"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "drizzle-kit",
|
||||
"version": "0.18.1",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"@esbuild-kit/esm-loader": {
|
||||
"name": "@esbuild-kit/esm-loader",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
"@esbuild-kit/core-utils"
|
||||
],
|
||||
"effects": [
|
||||
"drizzle-kit"
|
||||
],
|
||||
"range": "*",
|
||||
"nodes": [
|
||||
"node_modules/@esbuild-kit/esm-loader"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "drizzle-kit",
|
||||
"version": "0.18.1",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"@mrleebo/prisma-ast": {
|
||||
"name": "@mrleebo/prisma-ast",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
"chevrotain"
|
||||
],
|
||||
"effects": [
|
||||
"auth"
|
||||
],
|
||||
"range": "0.4.2 - 0.13.1",
|
||||
"nodes": [
|
||||
"node_modules/@mrleebo/prisma-ast"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "auth",
|
||||
"version": "1.2.3",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"@sveltejs/adapter-auto": {
|
||||
"name": "@sveltejs/adapter-auto",
|
||||
"severity": "low",
|
||||
"isDirect": true,
|
||||
"via": [
|
||||
"@sveltejs/kit"
|
||||
],
|
||||
"effects": [],
|
||||
"range": "1.0.0-next.0 - 8.0.0-next.0",
|
||||
"nodes": [
|
||||
"node_modules/@sveltejs/adapter-auto"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "@sveltejs/adapter-auto",
|
||||
"version": "0.0.1",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"@sveltejs/kit": {
|
||||
"name": "@sveltejs/kit",
|
||||
"severity": "low",
|
||||
"isDirect": true,
|
||||
"via": [
|
||||
"cookie"
|
||||
],
|
||||
"effects": [
|
||||
"@sveltejs/adapter-auto",
|
||||
"better-auth"
|
||||
],
|
||||
"range": "1.0.0-next.0 - 2.70.2",
|
||||
"nodes": [
|
||||
"node_modules/@sveltejs/kit"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "@sveltejs/kit",
|
||||
"version": "0.0.30",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"auth": {
|
||||
"name": "auth",
|
||||
"severity": "moderate",
|
||||
"isDirect": true,
|
||||
"via": [
|
||||
"@mrleebo/prisma-ast",
|
||||
"better-auth"
|
||||
],
|
||||
"effects": [],
|
||||
"range": ">=1.5.0-beta.15",
|
||||
"nodes": [
|
||||
"node_modules/auth"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "auth",
|
||||
"version": "1.2.3",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"better-auth": {
|
||||
"name": "better-auth",
|
||||
"severity": "low",
|
||||
"isDirect": true,
|
||||
"via": [
|
||||
"@sveltejs/kit"
|
||||
],
|
||||
"effects": [
|
||||
"auth"
|
||||
],
|
||||
"range": "1.3.10-beta.1 - 1.3.21 || 1.4.0-beta.1 - 1.4.0-beta.28 || >=1.4.4-beta.1",
|
||||
"nodes": [
|
||||
"node_modules/better-auth"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "better-auth",
|
||||
"version": "1.4.3",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"chevrotain": {
|
||||
"name": "chevrotain",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
"@chevrotain/cst-dts-gen",
|
||||
"@chevrotain/gast",
|
||||
"lodash"
|
||||
],
|
||||
"effects": [
|
||||
"@mrleebo/prisma-ast"
|
||||
],
|
||||
"range": "10.0.0 - 10.5.0",
|
||||
"nodes": [
|
||||
"node_modules/chevrotain"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "auth",
|
||||
"version": "1.2.3",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"cookie": {
|
||||
"name": "cookie",
|
||||
"severity": "low",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
{
|
||||
"source": 1103907,
|
||||
"name": "cookie",
|
||||
"dependency": "cookie",
|
||||
"title": "cookie accepts cookie name, path, and domain with out of bounds characters",
|
||||
"url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x",
|
||||
"severity": "low",
|
||||
"cwe": [
|
||||
"CWE-74"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 0,
|
||||
"vectorString": null
|
||||
},
|
||||
"range": "<0.7.0"
|
||||
}
|
||||
],
|
||||
"effects": [
|
||||
"@sveltejs/kit"
|
||||
],
|
||||
"range": "<0.7.0",
|
||||
"nodes": [
|
||||
"node_modules/cookie"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "@sveltejs/kit",
|
||||
"version": "0.0.30",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"drizzle-kit": {
|
||||
"name": "drizzle-kit",
|
||||
"severity": "moderate",
|
||||
"isDirect": true,
|
||||
"via": [
|
||||
"@esbuild-kit/esm-loader"
|
||||
],
|
||||
"effects": [],
|
||||
"range": "0.19.0 - 1.0.0-beta.1-fd8bfcc",
|
||||
"nodes": [
|
||||
"node_modules/drizzle-kit"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "drizzle-kit",
|
||||
"version": "0.18.1",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"esbuild": {
|
||||
"name": "esbuild",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
{
|
||||
"source": 1102341,
|
||||
"name": "esbuild",
|
||||
"dependency": "esbuild",
|
||||
"title": "esbuild enables any website to send any requests to the development server and read the response",
|
||||
"url": "https://github.com/advisories/GHSA-67mh-4wv8-2f99",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-346"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 5.3,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
|
||||
},
|
||||
"range": "<=0.24.2"
|
||||
}
|
||||
],
|
||||
"effects": [
|
||||
"@esbuild-kit/core-utils"
|
||||
],
|
||||
"range": "<=0.24.2",
|
||||
"nodes": [
|
||||
"node_modules/@esbuild-kit/core-utils/node_modules/esbuild"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "drizzle-kit",
|
||||
"version": "0.18.1",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
},
|
||||
"lodash": {
|
||||
"name": "lodash",
|
||||
"severity": "high",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
{
|
||||
"source": 1115806,
|
||||
"name": "lodash",
|
||||
"dependency": "lodash",
|
||||
"title": "lodash vulnerable to Code Injection via `_.template` imports key names",
|
||||
"url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc",
|
||||
"severity": "high",
|
||||
"cwe": [
|
||||
"CWE-94"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 8.1,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||||
},
|
||||
"range": ">=4.0.0 <=4.17.23"
|
||||
},
|
||||
{
|
||||
"source": 1115810,
|
||||
"name": "lodash",
|
||||
"dependency": "lodash",
|
||||
"title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`",
|
||||
"url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-1321"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 6.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
|
||||
},
|
||||
"range": "<=4.17.23"
|
||||
},
|
||||
{
|
||||
"source": 1120370,
|
||||
"name": "lodash",
|
||||
"dependency": "lodash",
|
||||
"title": "Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
|
||||
"url": "https://github.com/advisories/GHSA-xxjr-mmjv-4gpg",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-1321"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 6.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
|
||||
},
|
||||
"range": ">=4.0.0 <=4.17.22"
|
||||
}
|
||||
],
|
||||
"effects": [
|
||||
"@chevrotain/cst-dts-gen",
|
||||
"@chevrotain/gast",
|
||||
"chevrotain"
|
||||
],
|
||||
"range": "<=4.17.23",
|
||||
"nodes": [
|
||||
"node_modules/lodash"
|
||||
],
|
||||
"fixAvailable": {
|
||||
"name": "auth",
|
||||
"version": "1.2.3",
|
||||
"isSemVerMajor": true
|
||||
}
|
||||
}
|
||||
},
|
||||
"metadata": {
|
||||
"vulnerabilities": {
|
||||
"info": 0,
|
||||
"low": 4,
|
||||
"moderate": 9,
|
||||
"high": 1,
|
||||
"critical": 0,
|
||||
"total": 14
|
||||
},
|
||||
"dependencies": {
|
||||
"prod": 2,
|
||||
"dev": 451,
|
||||
"optional": 139,
|
||||
"peer": 0,
|
||||
"peerOptional": 0,
|
||||
"total": 452
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user