iohook icon indicating copy to clipboard operation
iohook copied to clipboard

Security issues in dependencies

Open lacymorrow opened this issue 3 years ago • 0 comments

json-schema is vulnerable to Prototype Pollution #4

The latest possible version that can be installed is 0.2.3 because of the following conflicting dependencies:

[email protected] requires [email protected] via a transitive dependency on [email protected] [email protected] requires [email protected] via a transitive dependency on [email protected] The earliest fixed version is 0.4.0.

Regular Expression Denial of Service in trim-newlines #2

The latest possible version that can be installed is 1.0.0 because of the following conflicting dependencies:

[email protected] requires trim-newlines@^4.0.2 via a transitive dependency on [email protected] [email protected] requires trim-newlines@^1.0.0 via a transitive dependency on [email protected] [email protected] requires trim-newlines@^4.0.2 via a transitive dependency on [email protected] The earliest fixed version is 3.0.1.

lacymorrow avatar Mar 07 '22 20:03 lacymorrow