Files
TORCH/reports/security/npm-audit-2026-02-27.json
T
google-labs-jules[bot]andPR0M3TH3AN 841cb6c2e2 Run daily deps-security-agent workflow
- Performed security audit with `npm audit` and `npm outdated`
- Resolved minimatch vulnerability via `npm audit fix`
- Updated nostr-tools to 2.23.2
- Generated daily security report and run artifacts
- Completed scheduler task log and memory updates

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-27 01:25:56 +00:00

69 lines
1.7 KiB
JSON

{
"auditReportVersion": 2,
"vulnerabilities": {
"minimatch": {
"name": "minimatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113545,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=10.0.0 <10.2.3"
},
{
"source": 1113553,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=10.0.0 <10.2.3"
}
],
"effects": [],
"range": "10.0.0 - 10.2.2",
"nodes": [
"node_modules/minimatch"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 1,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 10,
"dev": 118,
"optional": 1,
"peer": 0,
"peerOptional": 0,
"total": 127
}
}
}