tap-spec

tap-spec copied to clipboard

High Severity Vulnerability - Regular Expression Denial of Service in trim

2

## What There are currently 3 high severity vulnerabilities in `tap-spec 5.0.0`. ```js { "auditReportVersion": 2, "vulnerabilities": { "tap-out": { "name": "tap-out", "severity": "high", "via": [ "trim" ], "effects": [...

cujarrett

Bumps [minimist](https://github.com/substack/minimist) from 1.2.0 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR aeb3e27 1.2.5...

dependabot[bot]

Upgrade packages to remove npm vulnerability warnings

3

Upgrades: - lodash - tapes (currently unused as tests are outdated) Removes npm vulnerability warnings.

aral

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.5 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

CLI: (some?) test failures not reported

3

The `tap-spec` CLI fails to report some errors: ```sh $ cat foo # from https://testanything.org/tap-specification.html 1..4 ok 1 - Input file opened not ok 2 - First line of the...

ithinkihaveacat

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.10 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Cannot read property 'replace' of undefined

1

``` .../node_modules/trim/index.js:5 return str.replace(/^\s*|\s*$/g, ''); ^ TypeError: Cannot read property 'replace' of undefined at trim (.../node_modules/trim/index.js:5:14) at Parser._handleError (.../node_modules/tap-out/index.js:187:14) at Parser.handleLine (.../node_modules/tap-out/index.js:48:8) at Stream. (.../node_modules/tap-out/index.js:241:14) at Stream.emit (events.js:180:13) at drain...

bitmage

Update lodash requirement to fix security vulnerability

1

Audit marks this package with a moderate warning due to the lower version of lodash. Please update to version >=4.17.11 of lodash

ReinierRothuis

Crashes on Tap 13 data

14

This reporter crashes when piping in [Tap 13 data](https://gist.github.com/Munter/c634d3e4268a72cd1326#file-mntr-dk-tap): ``` $ hyperlink https://mntr.dk/ -r | tap-spec Crawling internal assets ✓ loading https://mntr.dk/ ✓ loading https://mntr.dk/favicon.ico ✓ loading https://mntr.dk/assets/images/favicon/152.png ✓ loading...

Munter

Eats non-test console output

1

Piping into `tap-spec` will sometimes eat my debug statements, depending on where they appear in the tap output. Other times the output will be there, but all my colored output...

bitmage