@stordata/vsphere-soapify 1.0.20250624140830 → 1.0.20250722140755

package/gl-sast-report.json

@@ -55,7 +55,7 @@
       "vendor": {
         "name": "GitLab"
       },
-      "version": "6.3.2"
+      "version": "6.5.0"
     },
     "scanner": {
       "id": "semgrep",
@@ -64,7 +64,7 @@
       "vendor": {
         "name": "GitLab"
       },
-      "version": "1.110.0"
+      "version": "1.118.0"
     },
     "primary_identifiers": [
       {
@@ -620,12 +620,14 @@
       {
         "type": "semgrep_id",
         "name": "eslint.detect-buffer-noassert-read",
-        "value": "eslint.detect-buffer-noassert-read"
+        "value": "eslint.detect-buffer-noassert-read",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-buffer-noassert.js"
       },
       {
         "type": "semgrep_id",
         "name": "eslint.detect-buffer-noassert-write",
-        "value": "eslint.detect-buffer-noassert-write"
+        "value": "eslint.detect-buffer-noassert-write",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-buffer-noassert.js"
       },
       {
         "type": "semgrep_id",
@@ -635,12 +637,14 @@
       {
         "type": "semgrep_id",
         "name": "eslint.detect-eval-with-expression",
-        "value": "eslint.detect-eval-with-expression"
+        "value": "eslint.detect-eval-with-expression",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-eval-with-expression.js"
       },
       {
         "type": "semgrep_id",
         "name": "eslint.detect-new-buffer",
-        "value": "eslint.detect-new-buffer"
+        "value": "eslint.detect-new-buffer",
+        "url": "https://github.com/eslint-community/eslint-plugin-security/blob/main/rules/detect-new-buffer.js"
       },
       {
         "type": "semgrep_id",
@@ -655,7 +659,8 @@
       {
         "type": "semgrep_id",
         "name": "eslint.detect-non-literal-require",
-        "value": "eslint.detect-non-literal-require"
+        "value": "eslint.detect-non-literal-require",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-non-literal-require.js"
       },
       {
         "type": "semgrep_id",
@@ -665,7 +670,8 @@
       {
         "type": "semgrep_id",
         "name": "eslint.detect-pseudoRandomBytes",
-        "value": "eslint.detect-pseudoRandomBytes"
+        "value": "eslint.detect-pseudoRandomBytes",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-pseudoRandomBytes.js"
       },
       {
         "type": "semgrep_id",
@@ -2190,12 +2196,14 @@
       {
         "type": "semgrep_id",
         "name": "java_crypto_rule_JwtDecodeWithoutVerify",
-        "value": "java_crypto_rule_JwtDecodeWithoutVerify"
+        "value": "java_crypto_rule_JwtDecodeWithoutVerify",
+        "url": "https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/"
       },
       {
         "type": "semgrep_id",
         "name": "java_crypto_rule_JwtNoneAlgorithm",
-        "value": "java_crypto_rule_JwtNoneAlgorithm"
+        "value": "java_crypto_rule_JwtNoneAlgorithm",
+        "url": "https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/"
       },
       {
         "type": "semgrep_id",
@@ -2205,7 +2213,8 @@
       {
         "type": "semgrep_id",
         "name": "java_csrf_rule-UnrestrictedRequestMapping",
-        "value": "java_csrf_rule-UnrestrictedRequestMapping"
+        "value": "java_csrf_rule-UnrestrictedRequestMapping",
+        "url": "https://find-sec-bugs.github.io/bugs.htm#SPRING_CSRF_UNRESTRICTED_REQUEST_MAPPING"
       },
       {
         "type": "semgrep_id",
@@ -2240,7 +2249,8 @@
       {
         "type": "semgrep_id",
         "name": "java_file_rule-FilePathTraversalHttpServlet",
-        "value": "java_file_rule-FilePathTraversalHttpServlet"
+        "value": "java_file_rule-FilePathTraversalHttpServlet",
+        "url": "https://find-sec-bugs.github.io/bugs.htm#PATH_TRAVERSAL_IN"
       },
       {
         "type": "semgrep_id",
@@ -2250,7 +2260,8 @@
       {
         "type": "semgrep_id",
         "name": "java_inject_rule-DangerousGroovyShell",
-        "value": "java_inject_rule-DangerousGroovyShell"
+        "value": "java_inject_rule-DangerousGroovyShell",
+        "url": "https://find-sec-bugs.github.io/bugs.htm#GROOVY_SHELL"
       },
       {
         "type": "semgrep_id",
@@ -2330,7 +2341,13 @@
       {
         "type": "semgrep_id",
         "name": "javascript_exec_rule-child-process",
-        "value": "javascript_exec_rule-child-process"
+        "value": "javascript_exec_rule-child-process",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-child-process.js"
+      },
+      {
+        "type": "semgrep_id",
+        "name": "kotlin_pathtraversal_rule-FilePathTraversal",
+        "value": "kotlin_pathtraversal_rule-FilePathTraversal"
       },
       {
         "type": "semgrep_id",
@@ -2895,7 +2912,8 @@
       {
         "type": "semgrep_id",
         "name": "python_jwt_rule-jwt-none-alg",
-        "value": "python_jwt_rule-jwt-none-alg"
+        "value": "python_jwt_rule-jwt-none-alg",
+        "url": "https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/"
       },
       {
         "type": "semgrep_id",
@@ -3024,22 +3042,22 @@
       }
     ],
     "type": "sast",
-    "start_time": "2025-06-24T14:07:18",
-    "end_time": "2025-06-24T14:07:34",
+    "start_time": "2025-07-22T14:07:09",
+    "end_time": "2025-07-22T14:07:23",
     "status": "success",
     "observability": {
       "events": [
         {
           "event": "collect_sast_scan_metrics_from_pipeline",
-          "property": "becd775d-582f-423d-b2f6-6f3395f738c8",
+          "property": "207235c3-ee47-451a-9bc3-3872e515e195",
           "label": "semgrep",
           "value": 0,
-          "version": "6.3.2",
+          "version": "6.5.0",
           "exit_code": 0,
           "override_count": 0,
           "passthrough_count": 0,
           "custom_exclude_path_count": 0,
-          "time_s": 15,
+          "time_s": 13,
           "file_count": 321
         }
       ]

package/gl-sbom-npm-npm.cdx.json

@@ -1,15 +1,15 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.4",
-  "serialNumber": "urn:uuid:29a2b57b-45a7-459c-8aa4-6b12525e3b56",
+  "serialNumber": "urn:uuid:a26a6896-d274-4df7-a803-5ee738faff6d",
   "version": 1,
   "metadata": {
-    "timestamp": "2025-06-24T14:08:19Z",
+    "timestamp": "2025-07-22T14:07:47Z",
     "tools": [
       {
         "vendor": "GitLab",
         "name": "Gemnasium",
-        "version": "6.1.3"
+        "version": "6.1.8"
       }
     ],
     "authors": [
@@ -1807,10 +1807,10 @@
     },
     {
       "name": "soap",
-      "version": "1.1.12",
-      "purl": "pkg:npm/soap@1.1.12",
+      "version": "1.2.0",
+      "purl": "pkg:npm/soap@1.2.0",
       "type": "library",
-      "bom-ref": "pkg:npm/soap@1.1.12"
+      "bom-ref": "pkg:npm/soap@1.2.0"
     },
     {
       "name": "string-width",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stordata/vsphere-soapify",
-  "version":"1.0.20250624140830",
+  "version":"1.0.20250722140755",
   "description": "A NodeJS abstraction layer for the vSphere SOAP API",
   "main": "index.js",
   "scripts": {
@@ -30,7 +30,7 @@
     "axios": "1.10.0",
     "debug": "4.4.1",
     "lodash": "4.17.21",
-    "soap": "1.1.12",
+    "soap": "1.2.0",
     "tough-cookie": "5.1.2"
   },
   "devDependencies": {