Uploaded image for project: 'AMQ Clients'
  1. AMQ Clients
  2. ENTMQCL-1819

[javascript] Vulnerabilities reported during installation of client

XMLWordPrintable

    • False
    • None
    • False

      + npm install --ignore-scripts
      npm WARN deprecated json3@3.3.2: Please use the native JSON object instead of JSON 3
      npm WARN deprecated circular-json@0.3.3: CircularJSON is in maintenance only, flatted is its successor.
      npm WARN deprecated core-js@2.6.10: core-js@<3.0 is no longer maintained and not recommended for usage due to the number of issues. Please, upgrade your dependencies to the actual version of core-js@3.
      npm notice created a lockfile as package-lock.json. You should commit this file.
      added 327 packages from 645 contributors and audited 1370 packages in 13.099s
      found 2 vulnerabilities (1 low, 1 critical)
        run `npm audit fix` to fix them, or `npm audit` for details
      

      Output from npm audit:

       === npm audit security report ===
      
      # Run  npm install --save-dev mocha@6.2.2  to resolve 2 vulnerabilities
      SEMVER WARNING: Recommended action is a potentially breaking change
      
        Critical        Command Injection
      
        Package         growl
      
        Dependency of   mocha [dev]
      
        Path            mocha > growl
      
        More info       https://nodesecurity.io/advisories/146
      
      
      
      
        Low             Regular Expression Denial of Service
      
        Package         debug
      
        Dependency of   mocha [dev]
      
        Path            mocha > debug
      
        More info       https://nodesecurity.io/advisories/534
      
      
      
      found 2 vulnerabilities (1 low, 1 critical) in 1370 scanned packages
        2 vulnerabilities require semver-major dependency updates.
      

            iboverma Irina Boverman
            dstuchli Dominik StuchlĂ­k (Inactive)
            Petr Matousek Petr Matousek
            Votes:
            0 Vote for this issue
            Watchers:
            9 Start watching this issue

              Created:
              Updated:
              Resolved: