cfc/_run40_npm_audit_root.json

{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "chromium-bidi": {
      "name": "chromium-bidi",
      "severity": "high",
      "isDirect": false,
      "via": [
        "zod"
      ],
      "effects": [
        "puppeteer",
        "puppeteer-core"
      ],
      "range": "0.5.13 - 157.0.8081-0",
      "nodes": [
        "node_modules/chromium-bidi"
      ],
      "fixAvailable": true
    },
    "nanoid": {
      "name": "nanoid",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1139427,
          "name": "nanoid",
          "dependency": "nanoid",
          "title": "nanoid: custom generators can loop indefinitely when size is zero",
          "url": "https://github.com/advisories/GHSA-2v37-7h3g-55p8",
          "severity": "high",
          "cwe": [
            "CWE-835"
          ],
          "cvss": {
            "score": 5.9,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
          },
          "range": "<3.3.18"
        }
      ],
      "effects": [],
      "range": "<3.3.18",
      "nodes": [
        "node_modules/nanoid"
      ],
      "fixAvailable": true
    },
    "puppeteer": {
      "name": "puppeteer",
      "severity": "high",
      "isDirect": true,
      "via": [
        "chromium-bidi",
        "puppeteer-core"
      ],
      "effects": [],
      "range": "22.5.0 - 25.12.0",
      "nodes": [
        "node_modules/puppeteer"
      ],
      "fixAvailable": true
    },
    "puppeteer-core": {
      "name": "puppeteer-core",
      "severity": "high",
      "isDirect": false,
      "via": [
        "chromium-bidi"
      ],
      "effects": [
        "puppeteer"
      ],
      "range": "22.5.0 - 25.12.0",
      "nodes": [
        "node_modules/puppeteer-core"
      ],
      "fixAvailable": true
    },
    "source-map-js": {
      "name": "source-map-js",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1241209,
          "name": "source-map-js",
          "dependency": "source-map-js",
          "title": "source-map-js allows event-loop denial of service through indexed source-map section offsets",
          "url": "https://github.com/advisories/GHSA-68fv-2mgg-jv7q",
          "severity": "high",
          "cwe": [
            "CWE-1284"
          ],
          "cvss": {
            "score": 7.5,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
          },
          "range": ">=1.0.0 <1.2.2"
        }
      ],
      "effects": [],
      "range": "1.0.0 - 1.2.1",
      "nodes": [
        "node_modules/source-map-js"
      ],
      "fixAvailable": true
    },
    "zod": {
      "name": "zod",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1243066,
          "name": "zod",
          "dependency": "zod",
          "title": "Zod can exhaust memory while validating oversized constrained collections",
          "url": "https://github.com/advisories/GHSA-mrhx-c7xc-m3w5",
          "severity": "high",
          "cwe": [
            "CWE-770"
          ],
          "cvss": {
            "score": 7.5,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
          },
          "range": "<4.6.6"
        }
      ],
      "effects": [
        "chromium-bidi"
      ],
      "range": "<4.6.6",
      "nodes": [
        "node_modules/zod"
      ],
      "fixAvailable": true
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 6,
      "critical": 0,
      "total": 6
    },
    "dependencies": {
      "prod": 37,
      "dev": 2,
      "optional": 26,
      "peer": 0,
      "peerOptional": 0,
      "total": 64
    }
  }
}