@sunchao116/mcp-audit 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (48) hide show
  1. package/package.json +36 -0
  2. package/src/audit/currentAudit.js +50 -0
  3. package/src/audit/getDepChain.js +47 -0
  4. package/src/audit/index.js +28 -0
  5. package/src/audit/normalizeAuditResult.js +47 -0
  6. package/src/audit/npmAudit.js +10 -0
  7. package/src/audit/remoteAudit.js +24 -0
  8. package/src/audit/test/test-currentAudit.js +15 -0
  9. package/src/audit/test/test-getDepChain.js +13 -0
  10. package/src/audit/test/test-index.js +17 -0
  11. package/src/audit/test/test-normalizeAuditResult.js +18 -0
  12. package/src/audit/test/test-npmAudit.js +15 -0
  13. package/src/audit/test/test-remoteAudit.js +15 -0
  14. package/src/audit/test/workdir/audit.json +2130 -0
  15. package/src/audit/test/workdir/current.json +10 -0
  16. package/src/audit/test/workdir/index.json +2398 -0
  17. package/src/audit/test/workdir/normalized.json +2581 -0
  18. package/src/audit/test/workdir/package-lock.json +16137 -0
  19. package/src/audit/test/workdir/package.json +1 -0
  20. package/src/audit/test/workdir/remote.json +75 -0
  21. package/src/common/utils.js +35 -0
  22. package/src/entry/index.js +28 -0
  23. package/src/entry/test/result/result-local.md +1177 -0
  24. package/src/entry/test/result/result-remote.md +151 -0
  25. package/src/entry/test/test-index.js +15 -0
  26. package/src/generateLock/generateLock.js +27 -0
  27. package/src/generateLock/index.js +1 -0
  28. package/src/generateLock/test/1.json +1 -0
  29. package/src/generateLock/test/test.js +15 -0
  30. package/src/generateLock/test/workdir/package-lock.json +16137 -0
  31. package/src/generateLock/test/workdir/package.json +1 -0
  32. package/src/main/index.js +23 -0
  33. package/src/mcpServer.js +43 -0
  34. package/src/parseProject/index.js +18 -0
  35. package/src/parseProject/parseLocalProject.js +8 -0
  36. package/src/parseProject/parseRemoteProject.js +65 -0
  37. package/src/parseProject/test/test.js +26 -0
  38. package/src/render/index.js +24 -0
  39. package/src/render/markdown.js +17 -0
  40. package/src/render/template/audit.ejs +30 -0
  41. package/src/render/template/detail-item.ejs +32 -0
  42. package/src/render/template/detail.ejs +7 -0
  43. package/src/render/template/index.ejs +8 -0
  44. package/src/render/test/test-index.js +27 -0
  45. package/src/render/test/workdir/auditResult.json +2101 -0
  46. package/src/render/test/workdir/index.md +1221 -0
  47. package/src/render/test/workdir/package.json +38 -0
  48. package/src/workDir/index.js +21 -0
package/src/render/test/workdir/auditResult.json ADDED
@@ -0,0 +1,2101 @@
1
+ {
2
+ "vulnerabilities": {
3
+ "critical": [
4
+ {
5
+ "name": "ejs",
6
+ "severity": "critical",
7
+ "problems": [
8
+ {
9
+ "source": 1089270,
10
+ "name": "ejs",
11
+ "dependency": "ejs",
12
+ "title": "ejs template injection vulnerability",
13
+ "url": "https://github.com/advisories/GHSA-phwq-j96m-2c2q",
14
+ "severity": "critical",
15
+ "cwe": ["CWE-74"],
16
+ "cvss": {
17
+ "score": 9.8,
18
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
19
+ },
20
+ "range": "<3.1.7"
21
+ },
22
+ {
23
+ "source": 1098366,
24
+ "name": "ejs",
25
+ "dependency": "ejs",
26
+ "title": "ejs lacks certain pollution protection",
27
+ "url": "https://github.com/advisories/GHSA-ghr5-ch3p-vcr6",
28
+ "severity": "moderate",
29
+ "cwe": ["CWE-693", "CWE-1321"],
30
+ "cvss": {
31
+ "score": 4,
32
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
33
+ },
34
+ "range": "<3.1.10"
35
+ }
36
+ ],
37
+ "nodes": ["node_modules/ejs"],
38
+ "depChains": [["webpack-bundle-analyzer", "ejs"]]
39
+ },
40
+ {
41
+ "name": "form-data",
42
+ "severity": "critical",
43
+ "problems": [
44
+ {
45
+ "source": 1106509,
46
+ "name": "form-data",
47
+ "dependency": "form-data",
48
+ "title": "form-data uses unsafe random function in form-data for choosing boundary",
49
+ "url": "https://github.com/advisories/GHSA-fjxv-7rqg-78g4",
50
+ "severity": "critical",
51
+ "cwe": ["CWE-330"],
52
+ "cvss": {
53
+ "score": 0,
54
+ "vectorString": null
55
+ },
56
+ "range": "<2.5.4"
57
+ }
58
+ ],
59
+ "nodes": ["node_modules/form-data"],
60
+ "depChains": [
61
+ [
62
+ "@vue/cli-plugin-babel",
63
+ "@vue/cli-service",
64
+ "@vue/cli-plugin-router",
65
+ "@vue/cli-shared-utils",
66
+ "request",
67
+ "form-data"
68
+ ],
69
+ [
70
+ "@vue/cli-service",
71
+ "@vue/cli-plugin-router",
72
+ "@vue/cli-shared-utils",
73
+ "request",
74
+ "form-data"
75
+ ],
76
+ [
77
+ "@vue/cli-plugin-vuex",
78
+ "@vue/cli-service",
79
+ "@vue/cli-plugin-router",
80
+ "@vue/cli-shared-utils",
81
+ "request",
82
+ "form-data"
83
+ ]
84
+ ]
85
+ },
86
+ {
87
+ "name": "loader-utils",
88
+ "severity": "critical",
89
+ "problems": [
90
+ {
91
+ "source": 1094088,
92
+ "name": "loader-utils",
93
+ "dependency": "loader-utils",
94
+ "title": "Prototype pollution in webpack loader-utils",
95
+ "url": "https://github.com/advisories/GHSA-76p3-8jx3-jpfq",
96
+ "severity": "critical",
97
+ "cwe": ["CWE-1321"],
98
+ "cvss": {
99
+ "score": 9.8,
100
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
101
+ },
102
+ "range": "<1.4.1"
103
+ }
104
+ ],
105
+ "nodes": ["node_modules/html-webpack-plugin/node_modules/loader-utils"],
106
+ "depChains": [["html-webpack-plugin", "loader-utils"]]
107
+ },
108
+ {
109
+ "name": "request",
110
+ "severity": "critical",
111
+ "problems": [
112
+ {
113
+ "source": 1096727,
114
+ "name": "request",
115
+ "dependency": "request",
116
+ "title": "Server-Side Request Forgery in Request",
117
+ "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6",
118
+ "severity": "moderate",
119
+ "cwe": ["CWE-918"],
120
+ "cvss": {
121
+ "score": 6.1,
122
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
123
+ },
124
+ "range": "<=2.88.2"
125
+ }
126
+ ],
127
+ "nodes": ["node_modules/request"],
128
+ "depChains": [
129
+ [
130
+ "@vue/cli-plugin-babel",
131
+ "@vue/cli-service",
132
+ "@vue/cli-plugin-router",
133
+ "@vue/cli-shared-utils",
134
+ "request"
135
+ ],
136
+ [
137
+ "@vue/cli-service",
138
+ "@vue/cli-plugin-router",
139
+ "@vue/cli-shared-utils",
140
+ "request"
141
+ ],
142
+ [
143
+ "@vue/cli-plugin-vuex",
144
+ "@vue/cli-service",
145
+ "@vue/cli-plugin-router",
146
+ "@vue/cli-shared-utils",
147
+ "request"
148
+ ]
149
+ ]
150
+ }
151
+ ],
152
+ "high": [
153
+ {
154
+ "name": "axios",
155
+ "range": "0.8.1",
156
+ "nodes": ["."],
157
+ "depChains": [],
158
+ "problems": [
159
+ {
160
+ "source": 1090049,
161
+ "name": "axios",
162
+ "dependency": "axios",
163
+ "title": "Axios vulnerable to Server-Side Request Forgery",
164
+ "url": "https://github.com/advisories/GHSA-4w2v-q235-vp99",
165
+ "severity": "moderate",
166
+ "cwe": ["CWE-918"],
167
+ "cvss": {
168
+ "score": 5.9,
169
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
170
+ },
171
+ "range": "<0.21.1"
172
+ },
173
+ {
174
+ "source": 1091722,
175
+ "name": "axios",
176
+ "dependency": "axios",
177
+ "title": "Denial of Service in axios",
178
+ "url": "https://github.com/advisories/GHSA-42xw-2xvc-qx8m",
179
+ "severity": "high",
180
+ "cwe": ["CWE-20", "CWE-755"],
181
+ "cvss": {
182
+ "score": 7.5,
183
+ "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
184
+ },
185
+ "range": "<=0.18.0"
186
+ },
187
+ {
188
+ "source": 1097679,
189
+ "name": "axios",
190
+ "dependency": "axios",
191
+ "title": "Axios Cross-Site Request Forgery Vulnerability",
192
+ "url": "https://github.com/advisories/GHSA-wf5p-g6vw-rhxx",
193
+ "severity": "moderate",
194
+ "cwe": ["CWE-352"],
195
+ "cvss": {
196
+ "score": 6.5,
197
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
198
+ },
199
+ "range": ">=0.8.1 <0.28.0"
200
+ },
201
+ {
202
+ "source": 1102326,
203
+ "name": "axios",
204
+ "dependency": "axios",
205
+ "title": "axios Inefficient Regular Expression Complexity vulnerability",
206
+ "url": "https://github.com/advisories/GHSA-cph5-m8f7-6c5x",
207
+ "severity": "high",
208
+ "cwe": ["CWE-400", "CWE-1333"],
209
+ "cvss": {
210
+ "score": 7.5,
211
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
212
+ },
213
+ "range": "<0.21.2"
214
+ },
215
+ {
216
+ "source": 1103617,
217
+ "name": "axios",
218
+ "dependency": "axios",
219
+ "title": "axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL",
220
+ "url": "https://github.com/advisories/GHSA-jr5f-v2jv-69x6",
221
+ "severity": "high",
222
+ "cwe": ["CWE-918"],
223
+ "cvss": {
224
+ "score": 0,
225
+ "vectorString": null
226
+ },
227
+ "range": "<0.30.0"
228
+ }
229
+ ],
230
+ "severity": "high"
231
+ },
232
+ {
233
+ "name": "axios",
234
+ "severity": "high",
235
+ "problems": [
236
+ {
237
+ "source": 1097679,
238
+ "name": "axios",
239
+ "dependency": "axios",
240
+ "title": "Axios Cross-Site Request Forgery Vulnerability",
241
+ "url": "https://github.com/advisories/GHSA-wf5p-g6vw-rhxx",
242
+ "severity": "moderate",
243
+ "cwe": ["CWE-352"],
244
+ "cvss": {
245
+ "score": 6.5,
246
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
247
+ },
248
+ "range": ">=0.8.1 <0.28.0"
249
+ },
250
+ {
251
+ "source": 1103617,
252
+ "name": "axios",
253
+ "dependency": "axios",
254
+ "title": "axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL",
255
+ "url": "https://github.com/advisories/GHSA-jr5f-v2jv-69x6",
256
+ "severity": "high",
257
+ "cwe": ["CWE-918"],
258
+ "cvss": {
259
+ "score": 0,
260
+ "vectorString": null
261
+ },
262
+ "range": "<0.30.0"
263
+ }
264
+ ],
265
+ "nodes": ["node_modules/axios"],
266
+ "depChains": [["axios"]]
267
+ },
268
+ {
269
+ "name": "braces",
270
+ "severity": "high",
271
+ "problems": [
272
+ {
273
+ "source": 1098094,
274
+ "name": "braces",
275
+ "dependency": "braces",
276
+ "title": "Uncontrolled resource consumption in braces",
277
+ "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg",
278
+ "severity": "high",
279
+ "cwe": ["CWE-400", "CWE-1050"],
280
+ "cvss": {
281
+ "score": 7.5,
282
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
283
+ },
284
+ "range": "<3.0.3"
285
+ }
286
+ ],
287
+ "nodes": ["node_modules/braces"],
288
+ "depChains": [
289
+ [
290
+ "@intervolga/optimize-cssnano-plugin",
291
+ "webpack",
292
+ "watchpack",
293
+ "watchpack-chokidar2",
294
+ "chokidar",
295
+ "braces"
296
+ ],
297
+ [
298
+ "@vue/cli-plugin-babel",
299
+ "webpack",
300
+ "watchpack",
301
+ "watchpack-chokidar2",
302
+ "chokidar",
303
+ "braces"
304
+ ],
305
+ [
306
+ "@vue/cli-plugin-babel",
307
+ "cache-loader",
308
+ "webpack",
309
+ "watchpack",
310
+ "watchpack-chokidar2",
311
+ "chokidar",
312
+ "braces"
313
+ ],
314
+ [
315
+ "@vue/cli-plugin-babel",
316
+ "@vue/cli-service",
317
+ "cache-loader",
318
+ "webpack",
319
+ "watchpack",
320
+ "watchpack-chokidar2",
321
+ "chokidar",
322
+ "braces"
323
+ ],
324
+ [
325
+ "@vue/cli-plugin-router",
326
+ "@vue/cli-service",
327
+ "cache-loader",
328
+ "webpack",
329
+ "watchpack",
330
+ "watchpack-chokidar2",
331
+ "chokidar",
332
+ "braces"
333
+ ],
334
+ [
335
+ "@vue/cli-plugin-vuex",
336
+ "@vue/cli-service",
337
+ "cache-loader",
338
+ "webpack",
339
+ "watchpack",
340
+ "watchpack-chokidar2",
341
+ "chokidar",
342
+ "braces"
343
+ ],
344
+ [
345
+ "@vue/cli-plugin-babel",
346
+ "@vue/cli-service",
347
+ "file-loader",
348
+ "webpack",
349
+ "watchpack",
350
+ "watchpack-chokidar2",
351
+ "chokidar",
352
+ "braces"
353
+ ],
354
+ [
355
+ "@vue/cli-plugin-router",
356
+ "@vue/cli-service",
357
+ "file-loader",
358
+ "webpack",
359
+ "watchpack",
360
+ "watchpack-chokidar2",
361
+ "chokidar",
362
+ "braces"
363
+ ],
364
+ [
365
+ "@vue/cli-plugin-vuex",
366
+ "@vue/cli-service",
367
+ "file-loader",
368
+ "webpack",
369
+ "watchpack",
370
+ "watchpack-chokidar2",
371
+ "chokidar",
372
+ "braces"
373
+ ],
374
+ [
375
+ "mini-css-extract-plugin",
376
+ "webpack",
377
+ "watchpack",
378
+ "watchpack-chokidar2",
379
+ "chokidar",
380
+ "braces"
381
+ ],
382
+ [
383
+ "@vue/cli-plugin-babel",
384
+ "@vue/cli-service",
385
+ "terser-webpack-plugin",
386
+ "webpack",
387
+ "watchpack",
388
+ "watchpack-chokidar2",
389
+ "chokidar",
390
+ "braces"
391
+ ],
392
+ [
393
+ "@vue/cli-plugin-router",
394
+ "@vue/cli-service",
395
+ "terser-webpack-plugin",
396
+ "webpack",
397
+ "watchpack",
398
+ "watchpack-chokidar2",
399
+ "chokidar",
400
+ "braces"
401
+ ],
402
+ [
403
+ "@vue/cli-plugin-vuex",
404
+ "@vue/cli-service",
405
+ "terser-webpack-plugin",
406
+ "webpack",
407
+ "watchpack",
408
+ "watchpack-chokidar2",
409
+ "chokidar",
410
+ "braces"
411
+ ],
412
+ [
413
+ "terser-webpack-plugin",
414
+ "webpack",
415
+ "watchpack",
416
+ "watchpack-chokidar2",
417
+ "chokidar",
418
+ "braces"
419
+ ],
420
+ [
421
+ "@vue/cli-plugin-babel",
422
+ "@vue/cli-service",
423
+ "url-loader",
424
+ "webpack",
425
+ "watchpack",
426
+ "watchpack-chokidar2",
427
+ "chokidar",
428
+ "braces"
429
+ ],
430
+ [
431
+ "@vue/cli-plugin-router",
432
+ "@vue/cli-service",
433
+ "url-loader",
434
+ "webpack",
435
+ "watchpack",
436
+ "watchpack-chokidar2",
437
+ "chokidar",
438
+ "braces"
439
+ ],
440
+ [
441
+ "@vue/cli-plugin-vuex",
442
+ "@vue/cli-service",
443
+ "url-loader",
444
+ "webpack",
445
+ "watchpack",
446
+ "watchpack-chokidar2",
447
+ "chokidar",
448
+ "braces"
449
+ ],
450
+ ["webpack-dev-server", "chokidar", "braces"],
451
+ [
452
+ "@intervolga/optimize-cssnano-plugin",
453
+ "webpack",
454
+ "watchpack",
455
+ "watchpack-chokidar2",
456
+ "chokidar",
457
+ "anymatch",
458
+ "micromatch",
459
+ "braces"
460
+ ],
461
+ [
462
+ "@vue/cli-plugin-babel",
463
+ "webpack",
464
+ "watchpack",
465
+ "watchpack-chokidar2",
466
+ "chokidar",
467
+ "anymatch",
468
+ "micromatch",
469
+ "braces"
470
+ ],
471
+ [
472
+ "@vue/cli-plugin-babel",
473
+ "cache-loader",
474
+ "webpack",
475
+ "watchpack",
476
+ "watchpack-chokidar2",
477
+ "chokidar",
478
+ "anymatch",
479
+ "micromatch",
480
+ "braces"
481
+ ],
482
+ [
483
+ "@vue/cli-plugin-babel",
484
+ "@vue/cli-service",
485
+ "cache-loader",
486
+ "webpack",
487
+ "watchpack",
488
+ "watchpack-chokidar2",
489
+ "chokidar",
490
+ "anymatch",
491
+ "micromatch",
492
+ "braces"
493
+ ],
494
+ [
495
+ "@vue/cli-plugin-router",
496
+ "@vue/cli-service",
497
+ "cache-loader",
498
+ "webpack",
499
+ "watchpack",
500
+ "watchpack-chokidar2",
501
+ "chokidar",
502
+ "anymatch",
503
+ "micromatch",
504
+ "braces"
505
+ ],
506
+ [
507
+ "@vue/cli-plugin-vuex",
508
+ "@vue/cli-service",
509
+ "cache-loader",
510
+ "webpack",
511
+ "watchpack",
512
+ "watchpack-chokidar2",
513
+ "chokidar",
514
+ "anymatch",
515
+ "micromatch",
516
+ "braces"
517
+ ],
518
+ [
519
+ "@vue/cli-plugin-babel",
520
+ "@vue/cli-service",
521
+ "file-loader",
522
+ "webpack",
523
+ "watchpack",
524
+ "watchpack-chokidar2",
525
+ "chokidar",
526
+ "anymatch",
527
+ "micromatch",
528
+ "braces"
529
+ ],
530
+ [
531
+ "@vue/cli-plugin-router",
532
+ "@vue/cli-service",
533
+ "file-loader",
534
+ "webpack",
535
+ "watchpack",
536
+ "watchpack-chokidar2",
537
+ "chokidar",
538
+ "anymatch",
539
+ "micromatch",
540
+ "braces"
541
+ ],
542
+ [
543
+ "@vue/cli-plugin-vuex",
544
+ "@vue/cli-service",
545
+ "file-loader",
546
+ "webpack",
547
+ "watchpack",
548
+ "watchpack-chokidar2",
549
+ "chokidar",
550
+ "anymatch",
551
+ "micromatch",
552
+ "braces"
553
+ ],
554
+ [
555
+ "mini-css-extract-plugin",
556
+ "webpack",
557
+ "watchpack",
558
+ "watchpack-chokidar2",
559
+ "chokidar",
560
+ "anymatch",
561
+ "micromatch",
562
+ "braces"
563
+ ],
564
+ [
565
+ "@vue/cli-plugin-babel",
566
+ "@vue/cli-service",
567
+ "terser-webpack-plugin",
568
+ "webpack",
569
+ "watchpack",
570
+ "watchpack-chokidar2",
571
+ "chokidar",
572
+ "anymatch",
573
+ "micromatch",
574
+ "braces"
575
+ ],
576
+ [
577
+ "@vue/cli-plugin-router",
578
+ "@vue/cli-service",
579
+ "terser-webpack-plugin",
580
+ "webpack",
581
+ "watchpack",
582
+ "watchpack-chokidar2",
583
+ "chokidar",
584
+ "anymatch",
585
+ "micromatch",
586
+ "braces"
587
+ ],
588
+ [
589
+ "@vue/cli-plugin-vuex",
590
+ "@vue/cli-service",
591
+ "terser-webpack-plugin",
592
+ "webpack",
593
+ "watchpack",
594
+ "watchpack-chokidar2",
595
+ "chokidar",
596
+ "anymatch",
597
+ "micromatch",
598
+ "braces"
599
+ ],
600
+ [
601
+ "terser-webpack-plugin",
602
+ "webpack",
603
+ "watchpack",
604
+ "watchpack-chokidar2",
605
+ "chokidar",
606
+ "anymatch",
607
+ "micromatch",
608
+ "braces"
609
+ ],
610
+ [
611
+ "@vue/cli-plugin-babel",
612
+ "@vue/cli-service",
613
+ "url-loader",
614
+ "webpack",
615
+ "watchpack",
616
+ "watchpack-chokidar2",
617
+ "chokidar",
618
+ "anymatch",
619
+ "micromatch",
620
+ "braces"
621
+ ],
622
+ [
623
+ "@vue/cli-plugin-router",
624
+ "@vue/cli-service",
625
+ "url-loader",
626
+ "webpack",
627
+ "watchpack",
628
+ "watchpack-chokidar2",
629
+ "chokidar",
630
+ "anymatch",
631
+ "micromatch",
632
+ "braces"
633
+ ],
634
+ [
635
+ "@vue/cli-plugin-vuex",
636
+ "@vue/cli-service",
637
+ "url-loader",
638
+ "webpack",
639
+ "watchpack",
640
+ "watchpack-chokidar2",
641
+ "chokidar",
642
+ "anymatch",
643
+ "micromatch",
644
+ "braces"
645
+ ],
646
+ [
647
+ "webpack-dev-server",
648
+ "chokidar",
649
+ "anymatch",
650
+ "micromatch",
651
+ "braces"
652
+ ],
653
+ ["globby", "fast-glob", "micromatch", "braces"],
654
+ [
655
+ "@types/webpack-dev-server",
656
+ "http-proxy-middleware",
657
+ "micromatch",
658
+ "braces"
659
+ ],
660
+ [
661
+ "webpack-dev-server",
662
+ "http-proxy-middleware",
663
+ "micromatch",
664
+ "braces"
665
+ ],
666
+ [
667
+ "@intervolga/optimize-cssnano-plugin",
668
+ "webpack",
669
+ "watchpack",
670
+ "watchpack-chokidar2",
671
+ "chokidar",
672
+ "readdirp",
673
+ "micromatch",
674
+ "braces"
675
+ ],
676
+ [
677
+ "@vue/cli-plugin-babel",
678
+ "webpack",
679
+ "watchpack",
680
+ "watchpack-chokidar2",
681
+ "chokidar",
682
+ "readdirp",
683
+ "micromatch",
684
+ "braces"
685
+ ],
686
+ [
687
+ "@vue/cli-plugin-babel",
688
+ "cache-loader",
689
+ "webpack",
690
+ "watchpack",
691
+ "watchpack-chokidar2",
692
+ "chokidar",
693
+ "readdirp",
694
+ "micromatch",
695
+ "braces"
696
+ ],
697
+ [
698
+ "@vue/cli-plugin-babel",
699
+ "@vue/cli-service",
700
+ "cache-loader",
701
+ "webpack",
702
+ "watchpack",
703
+ "watchpack-chokidar2",
704
+ "chokidar",
705
+ "readdirp",
706
+ "micromatch",
707
+ "braces"
708
+ ],
709
+ [
710
+ "@vue/cli-plugin-router",
711
+ "@vue/cli-service",
712
+ "cache-loader",
713
+ "webpack",
714
+ "watchpack",
715
+ "watchpack-chokidar2",
716
+ "chokidar",
717
+ "readdirp",
718
+ "micromatch",
719
+ "braces"
720
+ ],
721
+ [
722
+ "@vue/cli-plugin-vuex",
723
+ "@vue/cli-service",
724
+ "cache-loader",
725
+ "webpack",
726
+ "watchpack",
727
+ "watchpack-chokidar2",
728
+ "chokidar",
729
+ "readdirp",
730
+ "micromatch",
731
+ "braces"
732
+ ],
733
+ [
734
+ "@vue/cli-plugin-babel",
735
+ "@vue/cli-service",
736
+ "file-loader",
737
+ "webpack",
738
+ "watchpack",
739
+ "watchpack-chokidar2",
740
+ "chokidar",
741
+ "readdirp",
742
+ "micromatch",
743
+ "braces"
744
+ ],
745
+ [
746
+ "@vue/cli-plugin-router",
747
+ "@vue/cli-service",
748
+ "file-loader",
749
+ "webpack",
750
+ "watchpack",
751
+ "watchpack-chokidar2",
752
+ "chokidar",
753
+ "readdirp",
754
+ "micromatch",
755
+ "braces"
756
+ ],
757
+ [
758
+ "@vue/cli-plugin-vuex",
759
+ "@vue/cli-service",
760
+ "file-loader",
761
+ "webpack",
762
+ "watchpack",
763
+ "watchpack-chokidar2",
764
+ "chokidar",
765
+ "readdirp",
766
+ "micromatch",
767
+ "braces"
768
+ ],
769
+ [
770
+ "mini-css-extract-plugin",
771
+ "webpack",
772
+ "watchpack",
773
+ "watchpack-chokidar2",
774
+ "chokidar",
775
+ "readdirp",
776
+ "micromatch",
777
+ "braces"
778
+ ],
779
+ [
780
+ "@vue/cli-plugin-babel",
781
+ "@vue/cli-service",
782
+ "terser-webpack-plugin",
783
+ "webpack",
784
+ "watchpack",
785
+ "watchpack-chokidar2",
786
+ "chokidar",
787
+ "readdirp",
788
+ "micromatch",
789
+ "braces"
790
+ ],
791
+ [
792
+ "@vue/cli-plugin-router",
793
+ "@vue/cli-service",
794
+ "terser-webpack-plugin",
795
+ "webpack",
796
+ "watchpack",
797
+ "watchpack-chokidar2",
798
+ "chokidar",
799
+ "readdirp",
800
+ "micromatch",
801
+ "braces"
802
+ ],
803
+ [
804
+ "@vue/cli-plugin-vuex",
805
+ "@vue/cli-service",
806
+ "terser-webpack-plugin",
807
+ "webpack",
808
+ "watchpack",
809
+ "watchpack-chokidar2",
810
+ "chokidar",
811
+ "readdirp",
812
+ "micromatch",
813
+ "braces"
814
+ ],
815
+ [
816
+ "terser-webpack-plugin",
817
+ "webpack",
818
+ "watchpack",
819
+ "watchpack-chokidar2",
820
+ "chokidar",
821
+ "readdirp",
822
+ "micromatch",
823
+ "braces"
824
+ ],
825
+ [
826
+ "@vue/cli-plugin-babel",
827
+ "@vue/cli-service",
828
+ "url-loader",
829
+ "webpack",
830
+ "watchpack",
831
+ "watchpack-chokidar2",
832
+ "chokidar",
833
+ "readdirp",
834
+ "micromatch",
835
+ "braces"
836
+ ],
837
+ [
838
+ "@vue/cli-plugin-router",
839
+ "@vue/cli-service",
840
+ "url-loader",
841
+ "webpack",
842
+ "watchpack",
843
+ "watchpack-chokidar2",
844
+ "chokidar",
845
+ "readdirp",
846
+ "micromatch",
847
+ "braces"
848
+ ],
849
+ [
850
+ "@vue/cli-plugin-vuex",
851
+ "@vue/cli-service",
852
+ "url-loader",
853
+ "webpack",
854
+ "watchpack",
855
+ "watchpack-chokidar2",
856
+ "chokidar",
857
+ "readdirp",
858
+ "micromatch",
859
+ "braces"
860
+ ],
861
+ [
862
+ "webpack-dev-server",
863
+ "chokidar",
864
+ "readdirp",
865
+ "micromatch",
866
+ "braces"
867
+ ],
868
+ [
869
+ "@intervolga/optimize-cssnano-plugin",
870
+ "webpack",
871
+ "micromatch",
872
+ "braces"
873
+ ],
874
+ ["@vue/cli-plugin-babel", "webpack", "micromatch", "braces"],
875
+ [
876
+ "@vue/cli-plugin-babel",
877
+ "cache-loader",
878
+ "webpack",
879
+ "micromatch",
880
+ "braces"
881
+ ],
882
+ [
883
+ "@vue/cli-plugin-babel",
884
+ "@vue/cli-service",
885
+ "cache-loader",
886
+ "webpack",
887
+ "micromatch",
888
+ "braces"
889
+ ],
890
+ [
891
+ "@vue/cli-plugin-router",
892
+ "@vue/cli-service",
893
+ "cache-loader",
894
+ "webpack",
895
+ "micromatch",
896
+ "braces"
897
+ ],
898
+ [
899
+ "@vue/cli-plugin-vuex",
900
+ "@vue/cli-service",
901
+ "cache-loader",
902
+ "webpack",
903
+ "micromatch",
904
+ "braces"
905
+ ],
906
+ [
907
+ "@vue/cli-plugin-babel",
908
+ "@vue/cli-service",
909
+ "file-loader",
910
+ "webpack",
911
+ "micromatch",
912
+ "braces"
913
+ ],
914
+ [
915
+ "@vue/cli-plugin-router",
916
+ "@vue/cli-service",
917
+ "file-loader",
918
+ "webpack",
919
+ "micromatch",
920
+ "braces"
921
+ ],
922
+ [
923
+ "@vue/cli-plugin-vuex",
924
+ "@vue/cli-service",
925
+ "file-loader",
926
+ "webpack",
927
+ "micromatch",
928
+ "braces"
929
+ ],
930
+ ["mini-css-extract-plugin", "webpack", "micromatch", "braces"],
931
+ [
932
+ "@vue/cli-plugin-babel",
933
+ "@vue/cli-service",
934
+ "terser-webpack-plugin",
935
+ "webpack",
936
+ "micromatch",
937
+ "braces"
938
+ ],
939
+ [
940
+ "@vue/cli-plugin-router",
941
+ "@vue/cli-service",
942
+ "terser-webpack-plugin",
943
+ "webpack",
944
+ "micromatch",
945
+ "braces"
946
+ ],
947
+ [
948
+ "@vue/cli-plugin-vuex",
949
+ "@vue/cli-service",
950
+ "terser-webpack-plugin",
951
+ "webpack",
952
+ "micromatch",
953
+ "braces"
954
+ ],
955
+ ["terser-webpack-plugin", "webpack", "micromatch", "braces"],
956
+ [
957
+ "@vue/cli-plugin-babel",
958
+ "@vue/cli-service",
959
+ "url-loader",
960
+ "webpack",
961
+ "micromatch",
962
+ "braces"
963
+ ],
964
+ [
965
+ "@vue/cli-plugin-router",
966
+ "@vue/cli-service",
967
+ "url-loader",
968
+ "webpack",
969
+ "micromatch",
970
+ "braces"
971
+ ],
972
+ [
973
+ "@vue/cli-plugin-vuex",
974
+ "@vue/cli-service",
975
+ "url-loader",
976
+ "webpack",
977
+ "micromatch",
978
+ "braces"
979
+ ]
980
+ ]
981
+ },
982
+ {
983
+ "name": "html-minifier",
984
+ "severity": "high",
985
+ "problems": [
986
+ {
987
+ "source": 1105440,
988
+ "name": "html-minifier",
989
+ "dependency": "html-minifier",
990
+ "title": "kangax html-minifier REDoS vulnerability",
991
+ "url": "https://github.com/advisories/GHSA-pfq8-rq6v-vf5m",
992
+ "severity": "high",
993
+ "cwe": ["CWE-400", "CWE-1333"],
994
+ "cvss": {
995
+ "score": 7.5,
996
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
997
+ },
998
+ "range": "<=4.0.0"
999
+ }
1000
+ ],
1001
+ "nodes": ["node_modules/html-minifier"],
1002
+ "depChains": [["html-webpack-plugin", "html-minifier"]]
1003
+ },
1004
+ {
1005
+ "name": "http-proxy-middleware",
1006
+ "severity": "high",
1007
+ "problems": [
1008
+ {
1009
+ "source": 1100223,
1010
+ "name": "http-proxy-middleware",
1011
+ "dependency": "http-proxy-middleware",
1012
+ "title": "Denial of service in http-proxy-middleware",
1013
+ "url": "https://github.com/advisories/GHSA-c7qv-q95q-8v27",
1014
+ "severity": "high",
1015
+ "cwe": ["CWE-400"],
1016
+ "cvss": {
1017
+ "score": 7.5,
1018
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
1019
+ },
1020
+ "range": "<2.0.7"
1021
+ },
1022
+ {
1023
+ "source": 1104105,
1024
+ "name": "http-proxy-middleware",
1025
+ "dependency": "http-proxy-middleware",
1026
+ "title": "http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed",
1027
+ "url": "https://github.com/advisories/GHSA-9gqv-wp59-fq42",
1028
+ "severity": "moderate",
1029
+ "cwe": ["CWE-754"],
1030
+ "cvss": {
1031
+ "score": 4,
1032
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N"
1033
+ },
1034
+ "range": ">=1.3.0 <2.0.9"
1035
+ },
1036
+ {
1037
+ "source": 1104106,
1038
+ "name": "http-proxy-middleware",
1039
+ "dependency": "http-proxy-middleware",
1040
+ "title": "http-proxy-middleware can call writeBody twice because \"else if\" is not used",
1041
+ "url": "https://github.com/advisories/GHSA-4www-5p9h-95mh",
1042
+ "severity": "moderate",
1043
+ "cwe": ["CWE-670"],
1044
+ "cvss": {
1045
+ "score": 4,
1046
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L"
1047
+ },
1048
+ "range": ">=1.3.0 <2.0.8"
1049
+ }
1050
+ ],
1051
+ "nodes": [
1052
+ "node_modules/http-proxy-middleware",
1053
+ "node_modules/webpack-dev-server/node_modules/http-proxy-middleware"
1054
+ ],
1055
+ "depChains": [
1056
+ ["@types/webpack-dev-server", "http-proxy-middleware"],
1057
+ ["webpack-dev-server", "http-proxy-middleware"]
1058
+ ]
1059
+ },
1060
+ {
1061
+ "name": "ip",
1062
+ "severity": "high",
1063
+ "problems": [
1064
+ {
1065
+ "source": 1101851,
1066
+ "name": "ip",
1067
+ "dependency": "ip",
1068
+ "title": "ip SSRF improper categorization in isPublic",
1069
+ "url": "https://github.com/advisories/GHSA-2p57-rm9w-gvfp",
1070
+ "severity": "high",
1071
+ "cwe": ["CWE-918"],
1072
+ "cvss": {
1073
+ "score": 8.1,
1074
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
1075
+ },
1076
+ "range": "<=2.0.1"
1077
+ }
1078
+ ],
1079
+ "nodes": ["node_modules/ip"],
1080
+ "depChains": [
1081
+ [
1082
+ "webpack-dev-server",
1083
+ "bonjour",
1084
+ "multicast-dns",
1085
+ "dns-packet",
1086
+ "ip"
1087
+ ],
1088
+ ["webpack-dev-server", "ip"]
1089
+ ]
1090
+ },
1091
+ {
1092
+ "name": "json5",
1093
+ "severity": "high",
1094
+ "problems": [
1095
+ {
1096
+ "source": 1096543,
1097
+ "name": "json5",
1098
+ "dependency": "json5",
1099
+ "title": "Prototype Pollution in JSON5 via Parse Method",
1100
+ "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h",
1101
+ "severity": "high",
1102
+ "cwe": ["CWE-1321"],
1103
+ "cvss": {
1104
+ "score": 7.1,
1105
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H"
1106
+ },
1107
+ "range": "<1.0.2"
1108
+ }
1109
+ ],
1110
+ "nodes": ["node_modules/html-webpack-plugin/node_modules/json5"],
1111
+ "depChains": [["html-webpack-plugin", "loader-utils", "json5"]]
1112
+ },
1113
+ {
1114
+ "name": "micromatch",
1115
+ "severity": "high",
1116
+ "problems": [
1117
+ {
1118
+ "source": 1098681,
1119
+ "name": "micromatch",
1120
+ "dependency": "micromatch",
1121
+ "title": "Regular Expression Denial of Service (ReDoS) in micromatch",
1122
+ "url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv",
1123
+ "severity": "moderate",
1124
+ "cwe": ["CWE-1333"],
1125
+ "cvss": {
1126
+ "score": 5.3,
1127
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
1128
+ },
1129
+ "range": "<4.0.8"
1130
+ }
1131
+ ],
1132
+ "nodes": ["node_modules/micromatch"],
1133
+ "depChains": [
1134
+ [
1135
+ "@intervolga/optimize-cssnano-plugin",
1136
+ "webpack",
1137
+ "watchpack",
1138
+ "watchpack-chokidar2",
1139
+ "chokidar",
1140
+ "anymatch",
1141
+ "micromatch"
1142
+ ],
1143
+ [
1144
+ "@vue/cli-plugin-babel",
1145
+ "webpack",
1146
+ "watchpack",
1147
+ "watchpack-chokidar2",
1148
+ "chokidar",
1149
+ "anymatch",
1150
+ "micromatch"
1151
+ ],
1152
+ [
1153
+ "@vue/cli-plugin-babel",
1154
+ "cache-loader",
1155
+ "webpack",
1156
+ "watchpack",
1157
+ "watchpack-chokidar2",
1158
+ "chokidar",
1159
+ "anymatch",
1160
+ "micromatch"
1161
+ ],
1162
+ [
1163
+ "@vue/cli-plugin-babel",
1164
+ "@vue/cli-service",
1165
+ "cache-loader",
1166
+ "webpack",
1167
+ "watchpack",
1168
+ "watchpack-chokidar2",
1169
+ "chokidar",
1170
+ "anymatch",
1171
+ "micromatch"
1172
+ ],
1173
+ [
1174
+ "@vue/cli-plugin-router",
1175
+ "@vue/cli-service",
1176
+ "cache-loader",
1177
+ "webpack",
1178
+ "watchpack",
1179
+ "watchpack-chokidar2",
1180
+ "chokidar",
1181
+ "anymatch",
1182
+ "micromatch"
1183
+ ],
1184
+ [
1185
+ "@vue/cli-plugin-vuex",
1186
+ "@vue/cli-service",
1187
+ "cache-loader",
1188
+ "webpack",
1189
+ "watchpack",
1190
+ "watchpack-chokidar2",
1191
+ "chokidar",
1192
+ "anymatch",
1193
+ "micromatch"
1194
+ ],
1195
+ [
1196
+ "@vue/cli-plugin-babel",
1197
+ "@vue/cli-service",
1198
+ "file-loader",
1199
+ "webpack",
1200
+ "watchpack",
1201
+ "watchpack-chokidar2",
1202
+ "chokidar",
1203
+ "anymatch",
1204
+ "micromatch"
1205
+ ],
1206
+ [
1207
+ "@vue/cli-plugin-router",
1208
+ "@vue/cli-service",
1209
+ "file-loader",
1210
+ "webpack",
1211
+ "watchpack",
1212
+ "watchpack-chokidar2",
1213
+ "chokidar",
1214
+ "anymatch",
1215
+ "micromatch"
1216
+ ],
1217
+ [
1218
+ "@vue/cli-plugin-vuex",
1219
+ "@vue/cli-service",
1220
+ "file-loader",
1221
+ "webpack",
1222
+ "watchpack",
1223
+ "watchpack-chokidar2",
1224
+ "chokidar",
1225
+ "anymatch",
1226
+ "micromatch"
1227
+ ],
1228
+ [
1229
+ "mini-css-extract-plugin",
1230
+ "webpack",
1231
+ "watchpack",
1232
+ "watchpack-chokidar2",
1233
+ "chokidar",
1234
+ "anymatch",
1235
+ "micromatch"
1236
+ ],
1237
+ [
1238
+ "@vue/cli-plugin-babel",
1239
+ "@vue/cli-service",
1240
+ "terser-webpack-plugin",
1241
+ "webpack",
1242
+ "watchpack",
1243
+ "watchpack-chokidar2",
1244
+ "chokidar",
1245
+ "anymatch",
1246
+ "micromatch"
1247
+ ],
1248
+ [
1249
+ "@vue/cli-plugin-router",
1250
+ "@vue/cli-service",
1251
+ "terser-webpack-plugin",
1252
+ "webpack",
1253
+ "watchpack",
1254
+ "watchpack-chokidar2",
1255
+ "chokidar",
1256
+ "anymatch",
1257
+ "micromatch"
1258
+ ],
1259
+ [
1260
+ "@vue/cli-plugin-vuex",
1261
+ "@vue/cli-service",
1262
+ "terser-webpack-plugin",
1263
+ "webpack",
1264
+ "watchpack",
1265
+ "watchpack-chokidar2",
1266
+ "chokidar",
1267
+ "anymatch",
1268
+ "micromatch"
1269
+ ],
1270
+ [
1271
+ "terser-webpack-plugin",
1272
+ "webpack",
1273
+ "watchpack",
1274
+ "watchpack-chokidar2",
1275
+ "chokidar",
1276
+ "anymatch",
1277
+ "micromatch"
1278
+ ],
1279
+ [
1280
+ "@vue/cli-plugin-babel",
1281
+ "@vue/cli-service",
1282
+ "url-loader",
1283
+ "webpack",
1284
+ "watchpack",
1285
+ "watchpack-chokidar2",
1286
+ "chokidar",
1287
+ "anymatch",
1288
+ "micromatch"
1289
+ ],
1290
+ [
1291
+ "@vue/cli-plugin-router",
1292
+ "@vue/cli-service",
1293
+ "url-loader",
1294
+ "webpack",
1295
+ "watchpack",
1296
+ "watchpack-chokidar2",
1297
+ "chokidar",
1298
+ "anymatch",
1299
+ "micromatch"
1300
+ ],
1301
+ [
1302
+ "@vue/cli-plugin-vuex",
1303
+ "@vue/cli-service",
1304
+ "url-loader",
1305
+ "webpack",
1306
+ "watchpack",
1307
+ "watchpack-chokidar2",
1308
+ "chokidar",
1309
+ "anymatch",
1310
+ "micromatch"
1311
+ ],
1312
+ ["webpack-dev-server", "chokidar", "anymatch", "micromatch"],
1313
+ ["globby", "fast-glob", "micromatch"],
1314
+ ["@types/webpack-dev-server", "http-proxy-middleware", "micromatch"],
1315
+ ["webpack-dev-server", "http-proxy-middleware", "micromatch"],
1316
+ [
1317
+ "@intervolga/optimize-cssnano-plugin",
1318
+ "webpack",
1319
+ "watchpack",
1320
+ "watchpack-chokidar2",
1321
+ "chokidar",
1322
+ "readdirp",
1323
+ "micromatch"
1324
+ ],
1325
+ [
1326
+ "@vue/cli-plugin-babel",
1327
+ "webpack",
1328
+ "watchpack",
1329
+ "watchpack-chokidar2",
1330
+ "chokidar",
1331
+ "readdirp",
1332
+ "micromatch"
1333
+ ],
1334
+ [
1335
+ "@vue/cli-plugin-babel",
1336
+ "cache-loader",
1337
+ "webpack",
1338
+ "watchpack",
1339
+ "watchpack-chokidar2",
1340
+ "chokidar",
1341
+ "readdirp",
1342
+ "micromatch"
1343
+ ],
1344
+ [
1345
+ "@vue/cli-plugin-babel",
1346
+ "@vue/cli-service",
1347
+ "cache-loader",
1348
+ "webpack",
1349
+ "watchpack",
1350
+ "watchpack-chokidar2",
1351
+ "chokidar",
1352
+ "readdirp",
1353
+ "micromatch"
1354
+ ],
1355
+ [
1356
+ "@vue/cli-plugin-router",
1357
+ "@vue/cli-service",
1358
+ "cache-loader",
1359
+ "webpack",
1360
+ "watchpack",
1361
+ "watchpack-chokidar2",
1362
+ "chokidar",
1363
+ "readdirp",
1364
+ "micromatch"
1365
+ ],
1366
+ [
1367
+ "@vue/cli-plugin-vuex",
1368
+ "@vue/cli-service",
1369
+ "cache-loader",
1370
+ "webpack",
1371
+ "watchpack",
1372
+ "watchpack-chokidar2",
1373
+ "chokidar",
1374
+ "readdirp",
1375
+ "micromatch"
1376
+ ],
1377
+ [
1378
+ "@vue/cli-plugin-babel",
1379
+ "@vue/cli-service",
1380
+ "file-loader",
1381
+ "webpack",
1382
+ "watchpack",
1383
+ "watchpack-chokidar2",
1384
+ "chokidar",
1385
+ "readdirp",
1386
+ "micromatch"
1387
+ ],
1388
+ [
1389
+ "@vue/cli-plugin-router",
1390
+ "@vue/cli-service",
1391
+ "file-loader",
1392
+ "webpack",
1393
+ "watchpack",
1394
+ "watchpack-chokidar2",
1395
+ "chokidar",
1396
+ "readdirp",
1397
+ "micromatch"
1398
+ ],
1399
+ [
1400
+ "@vue/cli-plugin-vuex",
1401
+ "@vue/cli-service",
1402
+ "file-loader",
1403
+ "webpack",
1404
+ "watchpack",
1405
+ "watchpack-chokidar2",
1406
+ "chokidar",
1407
+ "readdirp",
1408
+ "micromatch"
1409
+ ],
1410
+ [
1411
+ "mini-css-extract-plugin",
1412
+ "webpack",
1413
+ "watchpack",
1414
+ "watchpack-chokidar2",
1415
+ "chokidar",
1416
+ "readdirp",
1417
+ "micromatch"
1418
+ ],
1419
+ [
1420
+ "@vue/cli-plugin-babel",
1421
+ "@vue/cli-service",
1422
+ "terser-webpack-plugin",
1423
+ "webpack",
1424
+ "watchpack",
1425
+ "watchpack-chokidar2",
1426
+ "chokidar",
1427
+ "readdirp",
1428
+ "micromatch"
1429
+ ],
1430
+ [
1431
+ "@vue/cli-plugin-router",
1432
+ "@vue/cli-service",
1433
+ "terser-webpack-plugin",
1434
+ "webpack",
1435
+ "watchpack",
1436
+ "watchpack-chokidar2",
1437
+ "chokidar",
1438
+ "readdirp",
1439
+ "micromatch"
1440
+ ],
1441
+ [
1442
+ "@vue/cli-plugin-vuex",
1443
+ "@vue/cli-service",
1444
+ "terser-webpack-plugin",
1445
+ "webpack",
1446
+ "watchpack",
1447
+ "watchpack-chokidar2",
1448
+ "chokidar",
1449
+ "readdirp",
1450
+ "micromatch"
1451
+ ],
1452
+ [
1453
+ "terser-webpack-plugin",
1454
+ "webpack",
1455
+ "watchpack",
1456
+ "watchpack-chokidar2",
1457
+ "chokidar",
1458
+ "readdirp",
1459
+ "micromatch"
1460
+ ],
1461
+ [
1462
+ "@vue/cli-plugin-babel",
1463
+ "@vue/cli-service",
1464
+ "url-loader",
1465
+ "webpack",
1466
+ "watchpack",
1467
+ "watchpack-chokidar2",
1468
+ "chokidar",
1469
+ "readdirp",
1470
+ "micromatch"
1471
+ ],
1472
+ [
1473
+ "@vue/cli-plugin-router",
1474
+ "@vue/cli-service",
1475
+ "url-loader",
1476
+ "webpack",
1477
+ "watchpack",
1478
+ "watchpack-chokidar2",
1479
+ "chokidar",
1480
+ "readdirp",
1481
+ "micromatch"
1482
+ ],
1483
+ [
1484
+ "@vue/cli-plugin-vuex",
1485
+ "@vue/cli-service",
1486
+ "url-loader",
1487
+ "webpack",
1488
+ "watchpack",
1489
+ "watchpack-chokidar2",
1490
+ "chokidar",
1491
+ "readdirp",
1492
+ "micromatch"
1493
+ ],
1494
+ ["webpack-dev-server", "chokidar", "readdirp", "micromatch"],
1495
+ ["@intervolga/optimize-cssnano-plugin", "webpack", "micromatch"],
1496
+ ["@vue/cli-plugin-babel", "webpack", "micromatch"],
1497
+ ["@vue/cli-plugin-babel", "cache-loader", "webpack", "micromatch"],
1498
+ [
1499
+ "@vue/cli-plugin-babel",
1500
+ "@vue/cli-service",
1501
+ "cache-loader",
1502
+ "webpack",
1503
+ "micromatch"
1504
+ ],
1505
+ [
1506
+ "@vue/cli-plugin-router",
1507
+ "@vue/cli-service",
1508
+ "cache-loader",
1509
+ "webpack",
1510
+ "micromatch"
1511
+ ],
1512
+ [
1513
+ "@vue/cli-plugin-vuex",
1514
+ "@vue/cli-service",
1515
+ "cache-loader",
1516
+ "webpack",
1517
+ "micromatch"
1518
+ ],
1519
+ [
1520
+ "@vue/cli-plugin-babel",
1521
+ "@vue/cli-service",
1522
+ "file-loader",
1523
+ "webpack",
1524
+ "micromatch"
1525
+ ],
1526
+ [
1527
+ "@vue/cli-plugin-router",
1528
+ "@vue/cli-service",
1529
+ "file-loader",
1530
+ "webpack",
1531
+ "micromatch"
1532
+ ],
1533
+ [
1534
+ "@vue/cli-plugin-vuex",
1535
+ "@vue/cli-service",
1536
+ "file-loader",
1537
+ "webpack",
1538
+ "micromatch"
1539
+ ],
1540
+ ["mini-css-extract-plugin", "webpack", "micromatch"],
1541
+ [
1542
+ "@vue/cli-plugin-babel",
1543
+ "@vue/cli-service",
1544
+ "terser-webpack-plugin",
1545
+ "webpack",
1546
+ "micromatch"
1547
+ ],
1548
+ [
1549
+ "@vue/cli-plugin-router",
1550
+ "@vue/cli-service",
1551
+ "terser-webpack-plugin",
1552
+ "webpack",
1553
+ "micromatch"
1554
+ ],
1555
+ [
1556
+ "@vue/cli-plugin-vuex",
1557
+ "@vue/cli-service",
1558
+ "terser-webpack-plugin",
1559
+ "webpack",
1560
+ "micromatch"
1561
+ ],
1562
+ ["terser-webpack-plugin", "webpack", "micromatch"],
1563
+ [
1564
+ "@vue/cli-plugin-babel",
1565
+ "@vue/cli-service",
1566
+ "url-loader",
1567
+ "webpack",
1568
+ "micromatch"
1569
+ ],
1570
+ [
1571
+ "@vue/cli-plugin-router",
1572
+ "@vue/cli-service",
1573
+ "url-loader",
1574
+ "webpack",
1575
+ "micromatch"
1576
+ ],
1577
+ [
1578
+ "@vue/cli-plugin-vuex",
1579
+ "@vue/cli-service",
1580
+ "url-loader",
1581
+ "webpack",
1582
+ "micromatch"
1583
+ ]
1584
+ ]
1585
+ },
1586
+ {
1587
+ "name": "mockjs",
1588
+ "severity": "high",
1589
+ "problems": [
1590
+ {
1591
+ "source": 1095258,
1592
+ "name": "mockjs",
1593
+ "dependency": "mockjs",
1594
+ "title": "mockjs vulnerable to Prototype Pollution via the Util.extend function",
1595
+ "url": "https://github.com/advisories/GHSA-mh8j-9jvh-gjf6",
1596
+ "severity": "high",
1597
+ "cwe": ["CWE-1321"],
1598
+ "cvss": {
1599
+ "score": 8.2,
1600
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"
1601
+ },
1602
+ "range": "<=1.1.0"
1603
+ }
1604
+ ],
1605
+ "nodes": ["node_modules/mockjs"],
1606
+ "depChains": [["mockjs"]]
1607
+ },
1608
+ {
1609
+ "name": "node-forge",
1610
+ "severity": "high",
1611
+ "problems": [
1612
+ {
1613
+ "source": 1088227,
1614
+ "name": "node-forge",
1615
+ "dependency": "node-forge",
1616
+ "title": "Prototype Pollution in node-forge debug API.",
1617
+ "url": "https://github.com/advisories/GHSA-5rrq-pxf6-6jx5",
1618
+ "severity": "low",
1619
+ "cwe": ["CWE-1321"],
1620
+ "cvss": {
1621
+ "score": 0,
1622
+ "vectorString": null
1623
+ },
1624
+ "range": "<1.0.0"
1625
+ },
1626
+ {
1627
+ "source": 1088229,
1628
+ "name": "node-forge",
1629
+ "dependency": "node-forge",
1630
+ "title": "URL parsing in node-forge could lead to undesired behavior.",
1631
+ "url": "https://github.com/advisories/GHSA-gf8q-jrpm-jvxq",
1632
+ "severity": "low",
1633
+ "cwe": ["CWE-601"],
1634
+ "cvss": {
1635
+ "score": 0,
1636
+ "vectorString": null
1637
+ },
1638
+ "range": "<1.0.0"
1639
+ },
1640
+ {
1641
+ "source": 1088746,
1642
+ "name": "node-forge",
1643
+ "dependency": "node-forge",
1644
+ "title": "Improper Verification of Cryptographic Signature in `node-forge`",
1645
+ "url": "https://github.com/advisories/GHSA-2r2c-g63r-vccr",
1646
+ "severity": "moderate",
1647
+ "cwe": ["CWE-347"],
1648
+ "cvss": {
1649
+ "score": 5.3,
1650
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
1651
+ },
1652
+ "range": "<1.3.0"
1653
+ },
1654
+ {
1655
+ "source": 1093719,
1656
+ "name": "node-forge",
1657
+ "dependency": "node-forge",
1658
+ "title": "Open Redirect in node-forge",
1659
+ "url": "https://github.com/advisories/GHSA-8fr3-hfg3-gpgp",
1660
+ "severity": "moderate",
1661
+ "cwe": ["CWE-601"],
1662
+ "cvss": {
1663
+ "score": 6.1,
1664
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
1665
+ },
1666
+ "range": "<1.0.0"
1667
+ },
1668
+ {
1669
+ "source": 1102321,
1670
+ "name": "node-forge",
1671
+ "dependency": "node-forge",
1672
+ "title": "Improper Verification of Cryptographic Signature in node-forge",
1673
+ "url": "https://github.com/advisories/GHSA-x4jg-mjrx-434g",
1674
+ "severity": "high",
1675
+ "cwe": ["CWE-347"],
1676
+ "cvss": {
1677
+ "score": 7.5,
1678
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
1679
+ },
1680
+ "range": "<1.3.0"
1681
+ },
1682
+ {
1683
+ "source": 1102322,
1684
+ "name": "node-forge",
1685
+ "dependency": "node-forge",
1686
+ "title": "Improper Verification of Cryptographic Signature in node-forge",
1687
+ "url": "https://github.com/advisories/GHSA-cfm4-qjh2-4765",
1688
+ "severity": "high",
1689
+ "cwe": ["CWE-347"],
1690
+ "cvss": {
1691
+ "score": 7.5,
1692
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
1693
+ },
1694
+ "range": "<1.3.0"
1695
+ }
1696
+ ],
1697
+ "nodes": ["node_modules/node-forge"],
1698
+ "depChains": [["webpack-dev-server", "selfsigned", "node-forge"]]
1699
+ },
1700
+ {
1701
+ "name": "nth-check",
1702
+ "severity": "high",
1703
+ "problems": [
1704
+ {
1705
+ "source": 1095141,
1706
+ "name": "nth-check",
1707
+ "dependency": "nth-check",
1708
+ "title": "Inefficient Regular Expression Complexity in nth-check",
1709
+ "url": "https://github.com/advisories/GHSA-rp65-9cf3-cjxr",
1710
+ "severity": "high",
1711
+ "cwe": ["CWE-1333"],
1712
+ "cvss": {
1713
+ "score": 7.5,
1714
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
1715
+ },
1716
+ "range": "<2.0.1"
1717
+ }
1718
+ ],
1719
+ "nodes": ["node_modules/svgo/node_modules/nth-check"],
1720
+ "depChains": [["postcss-svgo", "svgo", "css-select", "nth-check"]]
1721
+ },
1722
+ {
1723
+ "name": "webpack-dev-middleware",
1724
+ "severity": "high",
1725
+ "problems": [
1726
+ {
1727
+ "source": 1096729,
1728
+ "name": "webpack-dev-middleware",
1729
+ "dependency": "webpack-dev-middleware",
1730
+ "title": "Path traversal in webpack-dev-middleware",
1731
+ "url": "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6",
1732
+ "severity": "high",
1733
+ "cwe": ["CWE-22"],
1734
+ "cvss": {
1735
+ "score": 7.4,
1736
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N"
1737
+ },
1738
+ "range": "<=5.3.3"
1739
+ }
1740
+ ],
1741
+ "nodes": ["node_modules/webpack-dev-middleware"],
1742
+ "depChains": [["webpack-dev-server", "webpack-dev-middleware"]]
1743
+ },
1744
+ {
1745
+ "name": "webpack-dev-server",
1746
+ "severity": "high",
1747
+ "problems": [
1748
+ {
1749
+ "source": 1105256,
1750
+ "name": "webpack-dev-server",
1751
+ "dependency": "webpack-dev-server",
1752
+ "title": "webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser",
1753
+ "url": "https://github.com/advisories/GHSA-9jgg-88mc-972h",
1754
+ "severity": "moderate",
1755
+ "cwe": ["CWE-346"],
1756
+ "cvss": {
1757
+ "score": 6.5,
1758
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
1759
+ },
1760
+ "range": "<=5.2.0"
1761
+ },
1762
+ {
1763
+ "source": 1105257,
1764
+ "name": "webpack-dev-server",
1765
+ "dependency": "webpack-dev-server",
1766
+ "title": "webpack-dev-server users' source code may be stolen when they access a malicious web site",
1767
+ "url": "https://github.com/advisories/GHSA-4v9v-hfq4-rm2v",
1768
+ "severity": "moderate",
1769
+ "cwe": ["CWE-749"],
1770
+ "cvss": {
1771
+ "score": 5.3,
1772
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
1773
+ },
1774
+ "range": "<=5.2.0"
1775
+ }
1776
+ ],
1777
+ "nodes": ["node_modules/webpack-dev-server"],
1778
+ "depChains": [["webpack-dev-server"]]
1779
+ }
1780
+ ],
1781
+ "moderate": [
1782
+ {
1783
+ "name": "postcss",
1784
+ "severity": "moderate",
1785
+ "problems": [
1786
+ {
1787
+ "source": 1094544,
1788
+ "name": "postcss",
1789
+ "dependency": "postcss",
1790
+ "title": "PostCSS line return parsing error",
1791
+ "url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j",
1792
+ "severity": "moderate",
1793
+ "cwe": ["CWE-74", "CWE-144"],
1794
+ "cvss": {
1795
+ "score": 5.3,
1796
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
1797
+ },
1798
+ "range": "<8.4.31"
1799
+ }
1800
+ ],
1801
+ "nodes": ["node_modules/postcss"],
1802
+ "depChains": [
1803
+ ["@intervolga/optimize-cssnano-plugin", "postcss"],
1804
+ [
1805
+ "@vue/cli-plugin-babel",
1806
+ "@vue/cli-service",
1807
+ "@vue/component-compiler-utils",
1808
+ "postcss"
1809
+ ],
1810
+ [
1811
+ "@vue/cli-plugin-router",
1812
+ "@vue/cli-service",
1813
+ "@vue/component-compiler-utils",
1814
+ "postcss"
1815
+ ],
1816
+ [
1817
+ "@vue/cli-plugin-vuex",
1818
+ "@vue/cli-service",
1819
+ "@vue/component-compiler-utils",
1820
+ "postcss"
1821
+ ],
1822
+ ["vue-loader", "@vue/component-compiler-utils", "postcss"],
1823
+ ["autoprefixer", "postcss"],
1824
+ ["css-declaration-sorter", "postcss"],
1825
+ [
1826
+ "@vue/cli-plugin-babel",
1827
+ "@vue/cli-service",
1828
+ "css-loader",
1829
+ "postcss"
1830
+ ],
1831
+ [
1832
+ "@vue/cli-plugin-router",
1833
+ "@vue/cli-service",
1834
+ "css-loader",
1835
+ "postcss"
1836
+ ],
1837
+ ["@vue/cli-plugin-vuex", "@vue/cli-service", "css-loader", "postcss"],
1838
+ ["@intervolga/optimize-cssnano-plugin", "cssnano", "postcss"],
1839
+ ["@vue/cli-plugin-babel", "@vue/cli-service", "cssnano", "postcss"],
1840
+ ["@vue/cli-plugin-router", "@vue/cli-service", "cssnano", "postcss"],
1841
+ ["@vue/cli-plugin-vuex", "@vue/cli-service", "cssnano", "postcss"],
1842
+ [
1843
+ "@intervolga/optimize-cssnano-plugin",
1844
+ "cssnano",
1845
+ "cssnano-preset-default",
1846
+ "postcss"
1847
+ ],
1848
+ [
1849
+ "@vue/cli-plugin-babel",
1850
+ "@vue/cli-service",
1851
+ "cssnano",
1852
+ "cssnano-preset-default",
1853
+ "postcss"
1854
+ ],
1855
+ [
1856
+ "@vue/cli-plugin-router",
1857
+ "@vue/cli-service",
1858
+ "cssnano",
1859
+ "cssnano-preset-default",
1860
+ "postcss"
1861
+ ],
1862
+ [
1863
+ "@vue/cli-plugin-vuex",
1864
+ "@vue/cli-service",
1865
+ "cssnano",
1866
+ "cssnano-preset-default",
1867
+ "postcss"
1868
+ ],
1869
+ ["cssnano-util-raw-cache", "postcss"],
1870
+ [
1871
+ "@vue/cli-plugin-babel",
1872
+ "@vue/cli-service",
1873
+ "css-loader",
1874
+ "icss-utils",
1875
+ "postcss"
1876
+ ],
1877
+ [
1878
+ "@vue/cli-plugin-router",
1879
+ "@vue/cli-service",
1880
+ "css-loader",
1881
+ "icss-utils",
1882
+ "postcss"
1883
+ ],
1884
+ [
1885
+ "@vue/cli-plugin-vuex",
1886
+ "@vue/cli-service",
1887
+ "css-loader",
1888
+ "icss-utils",
1889
+ "postcss"
1890
+ ],
1891
+ ["postcss-modules-local-by-default", "icss-utils", "postcss"],
1892
+ [
1893
+ "@vue/cli-plugin-babel",
1894
+ "@vue/cli-service",
1895
+ "css-loader",
1896
+ "postcss-modules-values",
1897
+ "icss-utils",
1898
+ "postcss"
1899
+ ],
1900
+ [
1901
+ "@vue/cli-plugin-router",
1902
+ "@vue/cli-service",
1903
+ "css-loader",
1904
+ "postcss-modules-values",
1905
+ "icss-utils",
1906
+ "postcss"
1907
+ ],
1908
+ [
1909
+ "@vue/cli-plugin-vuex",
1910
+ "@vue/cli-service",
1911
+ "css-loader",
1912
+ "postcss-modules-values",
1913
+ "icss-utils",
1914
+ "postcss"
1915
+ ],
1916
+ ["postcss-calc", "postcss"],
1917
+ ["postcss-colormin", "postcss"],
1918
+ ["postcss-convert-values", "postcss"],
1919
+ ["postcss-discard-comments", "postcss"],
1920
+ ["postcss-discard-duplicates", "postcss"],
1921
+ ["postcss-discard-empty", "postcss"],
1922
+ ["postcss-discard-overridden", "postcss"],
1923
+ [
1924
+ "@vue/cli-plugin-babel",
1925
+ "@vue/cli-service",
1926
+ "postcss-loader",
1927
+ "postcss"
1928
+ ],
1929
+ [
1930
+ "@vue/cli-plugin-router",
1931
+ "@vue/cli-service",
1932
+ "postcss-loader",
1933
+ "postcss"
1934
+ ],
1935
+ [
1936
+ "@vue/cli-plugin-vuex",
1937
+ "@vue/cli-service",
1938
+ "postcss-loader",
1939
+ "postcss"
1940
+ ],
1941
+ ["postcss-merge-longhand", "postcss"],
1942
+ ["postcss-merge-rules", "postcss"],
1943
+ ["postcss-minify-font-values", "postcss"],
1944
+ ["postcss-minify-gradients", "postcss"],
1945
+ ["postcss-minify-params", "postcss"],
1946
+ ["postcss-minify-selectors", "postcss"],
1947
+ ["postcss-modules-extract-imports", "postcss"],
1948
+ ["postcss-modules-local-by-default", "postcss"],
1949
+ ["postcss-modules-scope", "postcss"],
1950
+ [
1951
+ "@vue/cli-plugin-babel",
1952
+ "@vue/cli-service",
1953
+ "css-loader",
1954
+ "postcss-modules-values",
1955
+ "postcss"
1956
+ ],
1957
+ [
1958
+ "@vue/cli-plugin-router",
1959
+ "@vue/cli-service",
1960
+ "css-loader",
1961
+ "postcss-modules-values",
1962
+ "postcss"
1963
+ ],
1964
+ [
1965
+ "@vue/cli-plugin-vuex",
1966
+ "@vue/cli-service",
1967
+ "css-loader",
1968
+ "postcss-modules-values",
1969
+ "postcss"
1970
+ ],
1971
+ ["postcss-normalize-charset", "postcss"],
1972
+ ["postcss-normalize-display-values", "postcss"],
1973
+ ["postcss-normalize-positions", "postcss"],
1974
+ ["postcss-normalize-repeat-style", "postcss"],
1975
+ ["postcss-normalize-string", "postcss"],
1976
+ ["postcss-normalize-timing-functions", "postcss"],
1977
+ ["postcss-normalize-unicode", "postcss"],
1978
+ ["postcss-normalize-url", "postcss"],
1979
+ ["postcss-normalize-whitespace", "postcss"],
1980
+ ["postcss-ordered-values", "postcss"],
1981
+ ["postcss-reduce-initial", "postcss"],
1982
+ ["postcss-reduce-transforms", "postcss"],
1983
+ ["postcss-svgo", "postcss"],
1984
+ ["postcss-unique-selectors", "postcss"],
1985
+ ["postcss-merge-longhand", "stylehacks", "postcss"]
1986
+ ]
1987
+ },
1988
+ {
1989
+ "name": "tough-cookie",
1990
+ "severity": "moderate",
1991
+ "problems": [
1992
+ {
1993
+ "source": 1097682,
1994
+ "name": "tough-cookie",
1995
+ "dependency": "tough-cookie",
1996
+ "title": "tough-cookie Prototype Pollution vulnerability",
1997
+ "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3",
1998
+ "severity": "moderate",
1999
+ "cwe": ["CWE-1321"],
2000
+ "cvss": {
2001
+ "score": 6.5,
2002
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
2003
+ },
2004
+ "range": "<4.1.3"
2005
+ }
2006
+ ],
2007
+ "nodes": ["node_modules/tough-cookie"],
2008
+ "depChains": [
2009
+ [
2010
+ "@vue/cli-plugin-babel",
2011
+ "@vue/cli-service",
2012
+ "@vue/cli-plugin-router",
2013
+ "@vue/cli-shared-utils",
2014
+ "request",
2015
+ "tough-cookie"
2016
+ ],
2017
+ [
2018
+ "@vue/cli-service",
2019
+ "@vue/cli-plugin-router",
2020
+ "@vue/cli-shared-utils",
2021
+ "request",
2022
+ "tough-cookie"
2023
+ ],
2024
+ [
2025
+ "@vue/cli-plugin-vuex",
2026
+ "@vue/cli-service",
2027
+ "@vue/cli-plugin-router",
2028
+ "@vue/cli-shared-utils",
2029
+ "request",
2030
+ "tough-cookie"
2031
+ ]
2032
+ ]
2033
+ },
2034
+ {
2035
+ "name": "vue-template-compiler",
2036
+ "severity": "moderate",
2037
+ "problems": [
2038
+ {
2039
+ "source": 1098721,
2040
+ "name": "vue-template-compiler",
2041
+ "dependency": "vue-template-compiler",
2042
+ "title": "vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)",
2043
+ "url": "https://github.com/advisories/GHSA-g3ch-rx76-35fx",
2044
+ "severity": "moderate",
2045
+ "cwe": ["CWE-79"],
2046
+ "cvss": {
2047
+ "score": 4.2,
2048
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
2049
+ },
2050
+ "range": ">=2.0.0 <3.0.0"
2051
+ }
2052
+ ],
2053
+ "nodes": ["node_modules/vue-template-compiler"],
2054
+ "depChains": [
2055
+ [
2056
+ "@vue/cli-plugin-babel",
2057
+ "@vue/cli-service",
2058
+ "vue-template-compiler"
2059
+ ],
2060
+ [
2061
+ "@vue/cli-plugin-router",
2062
+ "@vue/cli-service",
2063
+ "vue-template-compiler"
2064
+ ],
2065
+ ["@vue/cli-plugin-vuex", "@vue/cli-service", "vue-template-compiler"]
2066
+ ]
2067
+ }
2068
+ ],
2069
+ "low": [
2070
+ {
2071
+ "name": "vue",
2072
+ "severity": "low",
2073
+ "problems": [
2074
+ {
2075
+ "source": 1100238,
2076
+ "name": "vue",
2077
+ "dependency": "vue",
2078
+ "title": "ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function",
2079
+ "url": "https://github.com/advisories/GHSA-5j4c-8p2g-v4jx",
2080
+ "severity": "low",
2081
+ "cwe": ["CWE-1333"],
2082
+ "cvss": {
2083
+ "score": 3.7,
2084
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
2085
+ },
2086
+ "range": ">=2.0.0-alpha.1 <3.0.0-alpha.0"
2087
+ }
2088
+ ],
2089
+ "nodes": ["node_modules/vue"],
2090
+ "depChains": [["vuex", "vue"]]
2091
+ }
2092
+ ]
2093
+ },
2094
+ "summary": {
2095
+ "total": 21,
2096
+ "critical": 4,
2097
+ "high": 13,
2098
+ "moderate": 3,
2099
+ "low": 1
2100
+ }
2101
+ }