{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "@chevrotain/cst-dts-gen": {
      "name": "@chevrotain/cst-dts-gen",
      "severity": "moderate",
      "isDirect": false,
      "via": [
        "@chevrotain/gast",
        "lodash"
      ],
      "effects": [
        "chevrotain"
      ],
      "range": "10.0.0 - 10.5.0",
      "nodes": [
        "node_modules/@chevrotain/cst-dts-gen"
      ],
      "fixAvailable": {
        "name": "auth",
        "version": "1.2.3",
        "isSemVerMajor": true
      }
    },
    "@chevrotain/gast": {
      "name": "@chevrotain/gast",
      "severity": "moderate",
      "isDirect": false,
      "via": [
        "lodash"
      ],
      "effects": [
        "@chevrotain/cst-dts-gen",
        "chevrotain"
      ],
      "range": "<=10.5.0",
      "nodes": [
        "node_modules/@chevrotain/gast"
      ],
      "fixAvailable": {
        "name": "auth",
        "version": "1.2.3",
        "isSemVerMajor": true
      }
    },
    "@esbuild-kit/core-utils": {
      "name": "@esbuild-kit/core-utils",
      "severity": "moderate",
      "isDirect": false,
      "via": [
        "esbuild"
      ],
      "effects": [
        "@esbuild-kit/esm-loader"
      ],
      "range": "*",
      "nodes": [
        "node_modules/@esbuild-kit/core-utils"
      ],
      "fixAvailable": {
        "name": "drizzle-kit",
        "version": "0.18.1",
        "isSemVerMajor": true
      }
    },
    "@esbuild-kit/esm-loader": {
      "name": "@esbuild-kit/esm-loader",
      "severity": "moderate",
      "isDirect": false,
      "via": [
        "@esbuild-kit/core-utils"
      ],
      "effects": [
        "drizzle-kit"
      ],
      "range": "*",
      "nodes": [
        "node_modules/@esbuild-kit/esm-loader"
      ],
      "fixAvailable": {
        "name": "drizzle-kit",
        "version": "0.18.1",
        "isSemVerMajor": true
      }
    },
    "@mrleebo/prisma-ast": {
      "name": "@mrleebo/prisma-ast",
      "severity": "moderate",
      "isDirect": false,
      "via": [
        "chevrotain"
      ],
      "effects": [
        "auth"
      ],
      "range": "0.4.2 - 0.13.1",
      "nodes": [
        "node_modules/@mrleebo/prisma-ast"
      ],
      "fixAvailable": {
        "name": "auth",
        "version": "1.2.3",
        "isSemVerMajor": true
      }
    },
    "@sveltejs/adapter-auto": {
      "name": "@sveltejs/adapter-auto",
      "severity": "low",
      "isDirect": true,
      "via": [
        "@sveltejs/kit"
      ],
      "effects": [],
      "range": "1.0.0-next.0 - 8.0.0-next.0",
      "nodes": [
        "node_modules/@sveltejs/adapter-auto"
      ],
      "fixAvailable": {
        "name": "@sveltejs/adapter-auto",
        "version": "0.0.1",
        "isSemVerMajor": true
      }
    },
    "@sveltejs/kit": {
      "name": "@sveltejs/kit",
      "severity": "low",
      "isDirect": true,
      "via": [
        "cookie"
      ],
      "effects": [
        "@sveltejs/adapter-auto",
        "better-auth"
      ],
      "range": "1.0.0-next.0 - 2.70.2",
      "nodes": [
        "node_modules/@sveltejs/kit"
      ],
      "fixAvailable": {
        "name": "@sveltejs/kit",
        "version": "0.0.30",
        "isSemVerMajor": true
      }
    },
    "auth": {
      "name": "auth",
      "severity": "moderate",
      "isDirect": true,
      "via": [
        "@mrleebo/prisma-ast",
        "better-auth"
      ],
      "effects": [],
      "range": ">=1.5.0-beta.15",
      "nodes": [
        "node_modules/auth"
      ],
      "fixAvailable": {
        "name": "auth",
        "version": "1.2.3",
        "isSemVerMajor": true
      }
    },
    "better-auth": {
      "name": "better-auth",
      "severity": "low",
      "isDirect": true,
      "via": [
        "@sveltejs/kit"
      ],
      "effects": [
        "auth"
      ],
      "range": "1.3.10-beta.1 - 1.3.21 || 1.4.0-beta.1 - 1.4.0-beta.28 || >=1.4.4-beta.1",
      "nodes": [
        "node_modules/better-auth"
      ],
      "fixAvailable": {
        "name": "better-auth",
        "version": "1.4.3",
        "isSemVerMajor": true
      }
    },
    "chevrotain": {
      "name": "chevrotain",
      "severity": "moderate",
      "isDirect": false,
      "via": [
        "@chevrotain/cst-dts-gen",
        "@chevrotain/gast",
        "lodash"
      ],
      "effects": [
        "@mrleebo/prisma-ast"
      ],
      "range": "10.0.0 - 10.5.0",
      "nodes": [
        "node_modules/chevrotain"
      ],
      "fixAvailable": {
        "name": "auth",
        "version": "1.2.3",
        "isSemVerMajor": true
      }
    },
    "cookie": {
      "name": "cookie",
      "severity": "low",
      "isDirect": false,
      "via": [
        {
          "source": 1103907,
          "name": "cookie",
          "dependency": "cookie",
          "title": "cookie accepts cookie name, path, and domain with out of bounds characters",
          "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x",
          "severity": "low",
          "cwe": [
            "CWE-74"
          ],
          "cvss": {
            "score": 0,
            "vectorString": null
          },
          "range": "<0.7.0"
        }
      ],
      "effects": [
        "@sveltejs/kit"
      ],
      "range": "<0.7.0",
      "nodes": [
        "node_modules/cookie"
      ],
      "fixAvailable": {
        "name": "@sveltejs/kit",
        "version": "0.0.30",
        "isSemVerMajor": true
      }
    },
    "drizzle-kit": {
      "name": "drizzle-kit",
      "severity": "moderate",
      "isDirect": true,
      "via": [
        "@esbuild-kit/esm-loader"
      ],
      "effects": [],
      "range": "0.19.0 - 1.0.0-beta.1-fd8bfcc",
      "nodes": [
        "node_modules/drizzle-kit"
      ],
      "fixAvailable": {
        "name": "drizzle-kit",
        "version": "0.18.1",
        "isSemVerMajor": true
      }
    },
    "esbuild": {
      "name": "esbuild",
      "severity": "moderate",
      "isDirect": false,
      "via": [
        {
          "source": 1102341,
          "name": "esbuild",
          "dependency": "esbuild",
          "title": "esbuild enables any website to send any requests to the development server and read the response",
          "url": "https://github.com/advisories/GHSA-67mh-4wv8-2f99",
          "severity": "moderate",
          "cwe": [
            "CWE-346"
          ],
          "cvss": {
            "score": 5.3,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
          },
          "range": "<=0.24.2"
        }
      ],
      "effects": [
        "@esbuild-kit/core-utils"
      ],
      "range": "<=0.24.2",
      "nodes": [
        "node_modules/@esbuild-kit/core-utils/node_modules/esbuild"
      ],
      "fixAvailable": {
        "name": "drizzle-kit",
        "version": "0.18.1",
        "isSemVerMajor": true
      }
    },
    "lodash": {
      "name": "lodash",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1115806,
          "name": "lodash",
          "dependency": "lodash",
          "title": "lodash vulnerable to Code Injection via `_.template` imports key names",
          "url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc",
          "severity": "high",
          "cwe": [
            "CWE-94"
          ],
          "cvss": {
            "score": 8.1,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
          },
          "range": ">=4.0.0 <=4.17.23"
        },
        {
          "source": 1115810,
          "name": "lodash",
          "dependency": "lodash",
          "title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`",
          "url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh",
          "severity": "moderate",
          "cwe": [
            "CWE-1321"
          ],
          "cvss": {
            "score": 6.5,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
          },
          "range": "<=4.17.23"
        },
        {
          "source": 1120370,
          "name": "lodash",
          "dependency": "lodash",
          "title": "Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
          "url": "https://github.com/advisories/GHSA-xxjr-mmjv-4gpg",
          "severity": "moderate",
          "cwe": [
            "CWE-1321"
          ],
          "cvss": {
            "score": 6.5,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
          },
          "range": ">=4.0.0 <=4.17.22"
        }
      ],
      "effects": [
        "@chevrotain/cst-dts-gen",
        "@chevrotain/gast",
        "chevrotain"
      ],
      "range": "<=4.17.23",
      "nodes": [
        "node_modules/lodash"
      ],
      "fixAvailable": {
        "name": "auth",
        "version": "1.2.3",
        "isSemVerMajor": true
      }
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 4,
      "moderate": 9,
      "high": 1,
      "critical": 0,
      "total": 14
    },
    "dependencies": {
      "prod": 2,
      "dev": 451,
      "optional": 139,
      "peer": 0,
      "peerOptional": 0,
      "total": 452
    }
  }
}