Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 19 additions & 19 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -5,22 +5,22 @@
"description": "A tool to learn OWASP Top 10 for node.js developers",
"main": "server.js",
"dependencies": {
"bcrypt-nodejs": "0.0.3",
"bcrypt-nodejs": "0.0.3",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

bcrypt-nodejs 0.0.3 / package.json

LOW  Unknown License (NOT_FOUND)

This package use a non-SPDX, unrecognized, or private open-source license. Ensure this package is compliant.

"body-parser": "^1.15.1",
"consolidate": "^0.14.1",
"csurf": "^1.8.3",
"dont-sniff-mimetype": "^1.0.0",
"dont-sniff-mimetype": "^1.0.0",
"express": "^4.13.4",
"express-session": "^1.13.0",
"forever": "^2.0.0",
"helmet": "^2.0.0",
"marked": "0.3.9",
"mongodb": "^2.1.18",
"forever": "^2.0.0",
"helmet": "^2.0.0",
"marked": "0.3.9",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

marked 0.3.9 / package.json

Total vulnerabilities: 3

Critical: 0 High: 2 Medium: 1 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2022-21681 HIGH HIGH 7.5 4.0.10 Open
CVE-2022-21680 HIGH HIGH 7.5 4.0.10 Open
PRISMA-2021-0013 MEDIUM MEDIUM - 1.1.1 Open

"mongodb": "^2.1.18",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

mongodb 2.1.18 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
GHSA-mh5c-679w-hh4r HIGH HIGH 7 3.1.13 Open

"needle": "2.2.4",
"node-esapi": "0.0.1",
"serve-favicon": "^2.3.0",
"swig": "^1.4.2",
"underscore": "^1.8.3"
"serve-favicon": "^2.3.0",
"swig": "^1.4.2",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

swig 1.4.2 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-25345 HIGH HIGH 7.5 - Open

"underscore": "^1.8.3"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

underscore 1.8.3 / package.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2021-23358 HIGH HIGH 7.2 1.12.1 Open

},
"comments": {
"//": "a9 insecure components"
Expand All @@ -40,22 +40,22 @@
},
"devDependencies": {
"async": "^2.0.0-rc.4",
"cross-env": "^7.0.2",
"cross-env": "^7.0.2",
"cypress": "^3.3.1",
"grunt": "^1.0.1",
"grunt-cli": "^1.2.0",
"grunt-concurrent": "^2.3.0",
"grunt-contrib-jshint": "^1.0.0",
"grunt-contrib-watch": "^1.0.0",
"grunt-cli": "^1.2.0",
"grunt-concurrent": "^2.3.0",
"grunt-contrib-jshint": "^1.0.0",
"grunt-contrib-watch": "^1.0.0",
"grunt-env": "latest",
"grunt-if": "https://github.com/binarymist/grunt-if/tarball/master",
"grunt-jsbeautifier": "^0.2.12",
"grunt-mocha-test": "^0.12.7",
"grunt-npm-install": "^0.3.0",
"grunt-retire": "^0.3.12",
"mocha": "^2.4.5",
"nodemon": "^1.19.1",
"selenium-webdriver": "^2.53.2",
"grunt-npm-install": "^0.3.0",
"grunt-retire": "^0.3.12",
"mocha": "^2.4.5",
"nodemon": "^1.19.1",
"selenium-webdriver": "^2.53.2",
"should": "^8.3.1",
"zaproxy": "^0.2.0"
},
Expand Down