antd-scss-theme-plugin
antd-scss-theme-plugin copied to clipboard
intoli
moderate severity vulnerabilities in 'hoek' package
There are 4 moderate vulnerabilities after installing this plugin
Moderate Prototype pollution
Package hoek
Patched in > 4.2.0 < 5.0.0 || >= 5.0.3
Dependency of antd-scss-theme-plugin [dev]
Path antd-scss-theme-plugin > less > request > hawk > boom > hoek
More info https://nodesecurity.io/advisories/566
Moderate Prototype pollution
Package hoek
Patched in > 4.2.0 < 5.0.0 || >= 5.0.3
Dependency of antd-scss-theme-plugin [dev]
Path antd-scss-theme-plugin > less > request > hawk > cryptiles > boom > hoek
More info https://nodesecurity.io/advisories/566
Moderate Prototype pollution
Package hoek
Patched in > 4.2.0 < 5.0.0 || >= 5.0.3
Dependency of antd-scss-theme-plugin [dev]
Path antd-scss-theme-plugin > less > request > hawk > hoek
More info https://nodesecurity.io/advisories/566
Moderate Prototype pollution
Package hoek
Patched in > 4.2.0 < 5.0.0 || >= 5.0.3
Dependency of antd-scss-theme-plugin [dev]
Path antd-scss-theme-plugin > less > request > hawk > sntp > hoek
More info https://nodesecurity.io/advisories/566
found 4 moderate severity vulnerabilities in 16528 scanned packages 4 vulnerabilities require manual review. See the full report for details.
Can you fix it? Thanks!
More information from yarn install:
warning antd-scss-theme-plugin > less > request > [email protected]: This module moved to @hapi/hawk. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues.
warning antd-scss-theme-plugin > less > request > hawk > [email protected]: This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial).
warning antd-scss-theme-plugin > less > request > hawk > [email protected]: This module moved to @hapi/sntp. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues.
warning antd-scss-theme-plugin > less > request > hawk > [email protected]: This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial).
warning antd-scss-theme-plugin > less > request > hawk > sntp > [email protected]: This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial).
warning antd-scss-theme-plugin > less > request > hawk > [email protected]: This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial).
warning antd-scss-theme-plugin > less > request > hawk > cryptiles > [email protected]: This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial).
warning antd-scss-theme-plugin > less > request > hawk > boom > [email protected]: This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial).
I'm not sure how I unassigned @prncc, definitely didn't mean to do that...
@bryanlarsen I'm not seeing that with npm audit – only hoek as above:
# npm audit
=== npm audit security report ===
Manual Review
Some vulnerabilities require your attention to resolve
Visit https://go.npm.me/audit-guide for additional guidance
Moderate Prototype Pollution
Package hoek
Patched in > 4.2.0 < 5.0.0 || >= 5.0.3
Dependency of antd-scss-theme-plugin [dev]
Path antd-scss-theme-plugin > less > request > hawk > boom > hoek
More info https://npmjs.com/advisories/566
Moderate Prototype Pollution
Package hoek
Patched in > 4.2.0 < 5.0.0 || >= 5.0.3
Dependency of antd-scss-theme-plugin [dev]
Path antd-scss-theme-plugin > less > request > hawk > cryptiles >
boom > hoek
More info https://npmjs.com/advisories/566
Moderate Prototype Pollution
Package hoek
Patched in > 4.2.0 < 5.0.0 || >= 5.0.3
Dependency of antd-scss-theme-plugin [dev]
Path antd-scss-theme-plugin > less > request > hawk > hoek
More info https://npmjs.com/advisories/566
Moderate Prototype Pollution
Package hoek
Patched in > 4.2.0 < 5.0.0 || >= 5.0.3
Dependency of antd-scss-theme-plugin [dev]
Path antd-scss-theme-plugin > less > request > hawk > sntp > hoek
More info https://npmjs.com/advisories/566
found 4 moderate severity vulnerabilities in 14342 scanned packages
4 vulnerabilities require manual review. See the full report for details.
less is now a major release behind.
Edit:
- Ref: https://www.npmjs.com/package/less