mirror of
https://github.com/PR0M3TH3AN/TORCH.git
synced 2026-10-27 07:51:52 +00:00
- Performed security audit with `npm audit` and `npm outdated` - Resolved minimatch vulnerability via `npm audit fix` - Updated nostr-tools to 2.23.2 - Generated daily security report and run artifacts - Completed scheduler task log and memory updates Co-authored-by: PR0M3TH3AN <[email protected]>
69 lines
1.7 KiB
JSON
69 lines
1.7 KiB
JSON
{
|
|
"auditReportVersion": 2,
|
|
"vulnerabilities": {
|
|
"minimatch": {
|
|
"name": "minimatch",
|
|
"severity": "high",
|
|
"isDirect": false,
|
|
"via": [
|
|
{
|
|
"source": 1113545,
|
|
"name": "minimatch",
|
|
"dependency": "minimatch",
|
|
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
|
|
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
|
|
"severity": "high",
|
|
"cwe": [
|
|
"CWE-407"
|
|
],
|
|
"cvss": {
|
|
"score": 7.5,
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
|
|
},
|
|
"range": ">=10.0.0 <10.2.3"
|
|
},
|
|
{
|
|
"source": 1113553,
|
|
"name": "minimatch",
|
|
"dependency": "minimatch",
|
|
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
|
|
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
|
|
"severity": "high",
|
|
"cwe": [
|
|
"CWE-1333"
|
|
],
|
|
"cvss": {
|
|
"score": 7.5,
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
|
|
},
|
|
"range": ">=10.0.0 <10.2.3"
|
|
}
|
|
],
|
|
"effects": [],
|
|
"range": "10.0.0 - 10.2.2",
|
|
"nodes": [
|
|
"node_modules/minimatch"
|
|
],
|
|
"fixAvailable": true
|
|
}
|
|
},
|
|
"metadata": {
|
|
"vulnerabilities": {
|
|
"info": 0,
|
|
"low": 0,
|
|
"moderate": 0,
|
|
"high": 1,
|
|
"critical": 0,
|
|
"total": 1
|
|
},
|
|
"dependencies": {
|
|
"prod": 10,
|
|
"dev": 118,
|
|
"optional": 1,
|
|
"peer": 0,
|
|
"peerOptional": 0,
|
|
"total": 127
|
|
}
|
|
}
|
|
}
|