Page Title

Report after running npm audit fix --force

# npm audit report ansi-html <0.0.8 Severity: high Uncontrolled Resource Consumption in ansi-html - https://github.com/advisories/GHSA-whgm-jr23-g3j9 fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/ansi-html webpack-dev-server 2.0.0-beta - 4.7.2 Depends on vulnerable versions of ansi-html Depends on vulnerable versions of chokidar Depends on vulnerable versions of selfsigned Depends on vulnerable versions of sockjs Depends on vulnerable versions of yargs node_modules/webpack-dev-server react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts braces <2.3.1 Regular Expression Denial of Service (ReDoS) in braces - https://github.com/advisories/GHSA-cwfw-4gq5-mrqx fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/jest-cli/node_modules/braces node_modules/jest-config/node_modules/braces node_modules/jest-haste-map/node_modules/braces node_modules/jest-message-util/node_modules/braces node_modules/jest-runtime/node_modules/braces node_modules/test-exclude/node_modules/braces micromatch 0.2.0 - 2.3.11 Depends on vulnerable versions of braces Depends on vulnerable versions of parse-glob node_modules/jest-cli/node_modules/micromatch node_modules/jest-config/node_modules/micromatch node_modules/jest-haste-map/node_modules/micromatch node_modules/jest-message-util/node_modules/micromatch node_modules/jest-runtime/node_modules/micromatch node_modules/test-exclude/node_modules/micromatch jest-cli 0.10.2 - 24.8.0 Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-environment-jsdom Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-snapshot Depends on vulnerable versions of micromatch Depends on vulnerable versions of node-notifier Depends on vulnerable versions of yargs node_modules/jest-cli jest 13.3.0-alpha.4eb0c908 - 23.6.0 Depends on vulnerable versions of jest-cli node_modules/jest react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts jest-config 12.1.1-alpha.2935e14d - 25.5.4 Depends on vulnerable versions of babel-jest Depends on vulnerable versions of jest-environment-jsdom Depends on vulnerable versions of jest-jasmine2 Depends on vulnerable versions of jest-util Depends on vulnerable versions of micromatch node_modules/jest-config jest-runner 21.0.0-alpha.1 - 22.4.4 || 23.4.0 - 23.6.0 Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-message-util node_modules/jest-runner jest-runtime 14.1.0 - 24.8.0 Depends on vulnerable versions of babel-plugin-istanbul Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-util Depends on vulnerable versions of micromatch Depends on vulnerable versions of yargs node_modules/jest-runtime jest-haste-map 16.1.0-alpha.691b0e22 - 24.0.0 Depends on vulnerable versions of micromatch Depends on vulnerable versions of sane node_modules/jest-haste-map jest-message-util 18.5.0-alpha.7da3df39 - 23.1.0 || 23.4.0 - 24.0.0-alpha.16 Depends on vulnerable versions of micromatch node_modules/jest-message-util expect 21.0.0-beta.1 - 22.4.3 || 23.4.0 - 23.6.0 Depends on vulnerable versions of jest-message-util node_modules/expect jest-jasmine2 18.5.0-alpha.7da3df39 - 22.4.4 || 23.4.0 - 23.6.0 Depends on vulnerable versions of expect Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-snapshot Depends on vulnerable versions of jest-util node_modules/jest-jasmine2 jest-snapshot 23.4.0 - 23.6.0 Depends on vulnerable versions of jest-message-util node_modules/jest-snapshot jest-resolve-dependencies 23.4.0 - 23.6.0 Depends on vulnerable versions of jest-snapshot node_modules/jest-resolve-dependencies jest-util 18.5.0-alpha.7da3df39 - 22.4.3 || 23.4.0 Depends on vulnerable versions of jest-message-util node_modules/jest-util jest-environment-jsdom 10.0.2 - 25.5.0 Depends on vulnerable versions of jest-util Depends on vulnerable versions of jsdom node_modules/jest-environment-jsdom jest-environment-node 18.5.0-alpha.7da3df39 - 22.4.3 || 23.4.0 Depends on vulnerable versions of jest-util node_modules/jest-environment-node test-exclude <=4.2.3 Depends on vulnerable versions of micromatch node_modules/test-exclude babel-plugin-istanbul <=5.0.0 Depends on vulnerable versions of test-exclude node_modules/babel-plugin-istanbul babel-jest 14.2.0-alpha.ca8bfb6e - 24.0.0-alpha.16 Depends on vulnerable versions of babel-plugin-istanbul node_modules/babel-jest browserslist 4.0.0 - 4.16.4 Severity: moderate Regular Expression Denial of Service in browserslist - https://github.com/advisories/GHSA-w8qv-6jwh-64r5 fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/react-dev-utils/node_modules/browserslist react-dev-utils 0.4.0 - 12.0.0-next.60 Depends on vulnerable versions of browserslist Depends on vulnerable versions of globby Depends on vulnerable versions of immer Depends on vulnerable versions of loader-utils Depends on vulnerable versions of recursive-readdir Depends on vulnerable versions of shell-quote node_modules/react-dev-utils react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts glob-parent <5.1.2 Severity: high glob-parent before 5.1.2 vulnerable to Regular Expression Denial of Service in enclosure regex - https://github.com/advisories/GHSA-ww39-953v-wcq6 fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/chokidar/node_modules/glob-parent node_modules/fast-glob/node_modules/glob-parent node_modules/glob-base/node_modules/glob-parent chokidar 1.0.0-rc1 - 2.1.8 Depends on vulnerable versions of glob-parent node_modules/chokidar fork-ts-checker-webpack-plugin-alt * Depends on vulnerable versions of chokidar node_modules/fork-ts-checker-webpack-plugin-alt react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts watchpack-chokidar2 * Depends on vulnerable versions of chokidar node_modules/watchpack-chokidar2 watchpack 1.7.2 - 1.7.5 Depends on vulnerable versions of watchpack-chokidar2 node_modules/watchpack webpack-dev-server 2.0.0-beta - 4.7.2 Depends on vulnerable versions of ansi-html Depends on vulnerable versions of chokidar Depends on vulnerable versions of selfsigned Depends on vulnerable versions of sockjs Depends on vulnerable versions of yargs node_modules/webpack-dev-server fast-glob <=2.2.7 Depends on vulnerable versions of glob-parent node_modules/fast-glob globby 8.0.0 - 9.2.0 Depends on vulnerable versions of fast-glob node_modules/globby react-dev-utils 0.4.0 - 12.0.0-next.60 Depends on vulnerable versions of browserslist Depends on vulnerable versions of globby Depends on vulnerable versions of immer Depends on vulnerable versions of loader-utils Depends on vulnerable versions of recursive-readdir Depends on vulnerable versions of shell-quote node_modules/react-dev-utils glob-base * Depends on vulnerable versions of glob-parent node_modules/glob-base parse-glob >=2.1.0 Depends on vulnerable versions of glob-base node_modules/parse-glob micromatch 0.2.0 - 2.3.11 Depends on vulnerable versions of braces Depends on vulnerable versions of parse-glob node_modules/jest-cli/node_modules/micromatch node_modules/jest-config/node_modules/micromatch node_modules/jest-haste-map/node_modules/micromatch node_modules/jest-message-util/node_modules/micromatch node_modules/jest-runtime/node_modules/micromatch node_modules/test-exclude/node_modules/micromatch jest-cli 0.10.2 - 24.8.0 Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-environment-jsdom Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-snapshot Depends on vulnerable versions of micromatch Depends on vulnerable versions of node-notifier Depends on vulnerable versions of yargs node_modules/jest-cli jest 13.3.0-alpha.4eb0c908 - 23.6.0 Depends on vulnerable versions of jest-cli node_modules/jest jest-config 12.1.1-alpha.2935e14d - 25.5.4 Depends on vulnerable versions of babel-jest Depends on vulnerable versions of jest-environment-jsdom Depends on vulnerable versions of jest-jasmine2 Depends on vulnerable versions of jest-util Depends on vulnerable versions of micromatch node_modules/jest-config jest-runner 21.0.0-alpha.1 - 22.4.4 || 23.4.0 - 23.6.0 Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-message-util node_modules/jest-runner jest-runtime 14.1.0 - 24.8.0 Depends on vulnerable versions of babel-plugin-istanbul Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-util Depends on vulnerable versions of micromatch Depends on vulnerable versions of yargs node_modules/jest-runtime jest-haste-map 16.1.0-alpha.691b0e22 - 24.0.0 Depends on vulnerable versions of micromatch Depends on vulnerable versions of sane node_modules/jest-haste-map jest-message-util 18.5.0-alpha.7da3df39 - 23.1.0 || 23.4.0 - 24.0.0-alpha.16 Depends on vulnerable versions of micromatch node_modules/jest-message-util expect 21.0.0-beta.1 - 22.4.3 || 23.4.0 - 23.6.0 Depends on vulnerable versions of jest-message-util node_modules/expect jest-jasmine2 18.5.0-alpha.7da3df39 - 22.4.4 || 23.4.0 - 23.6.0 Depends on vulnerable versions of expect Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-snapshot Depends on vulnerable versions of jest-util node_modules/jest-jasmine2 jest-snapshot 23.4.0 - 23.6.0 Depends on vulnerable versions of jest-message-util node_modules/jest-snapshot jest-resolve-dependencies 23.4.0 - 23.6.0 Depends on vulnerable versions of jest-snapshot node_modules/jest-resolve-dependencies jest-util 18.5.0-alpha.7da3df39 - 22.4.3 || 23.4.0 Depends on vulnerable versions of jest-message-util node_modules/jest-util jest-environment-jsdom 10.0.2 - 25.5.0 Depends on vulnerable versions of jest-util Depends on vulnerable versions of jsdom node_modules/jest-environment-jsdom jest-environment-node 18.5.0-alpha.7da3df39 - 22.4.3 || 23.4.0 Depends on vulnerable versions of jest-util node_modules/jest-environment-node test-exclude <=4.2.3 Depends on vulnerable versions of micromatch node_modules/test-exclude babel-plugin-istanbul <=5.0.0 Depends on vulnerable versions of test-exclude node_modules/babel-plugin-istanbul babel-jest 14.2.0-alpha.ca8bfb6e - 24.0.0-alpha.16 Depends on vulnerable versions of babel-plugin-istanbul node_modules/babel-jest immer <=9.0.5 Severity: high Prototype Pollution in immer - https://github.com/advisories/GHSA-9qmh-276g-x5pj Prototype Pollution in immer - https://github.com/advisories/GHSA-c36v-fmgq-m8hx fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/immer react-dev-utils 0.4.0 - 12.0.0-next.60 Depends on vulnerable versions of browserslist Depends on vulnerable versions of globby Depends on vulnerable versions of immer Depends on vulnerable versions of loader-utils Depends on vulnerable versions of recursive-readdir Depends on vulnerable versions of shell-quote node_modules/react-dev-utils react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts jsdom <=16.4.0 Severity: moderate Insufficient Granularity of Access Control in JSDom - https://github.com/advisories/GHSA-f4c9-cqv8-9v98 fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/jest-environment-jsdom/node_modules/jsdom jest-environment-jsdom 10.0.2 - 25.5.0 Depends on vulnerable versions of jest-util Depends on vulnerable versions of jsdom node_modules/jest-environment-jsdom jest-cli 0.10.2 - 24.8.0 Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-environment-jsdom Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-snapshot Depends on vulnerable versions of micromatch Depends on vulnerable versions of node-notifier Depends on vulnerable versions of yargs node_modules/jest-cli jest 13.3.0-alpha.4eb0c908 - 23.6.0 Depends on vulnerable versions of jest-cli node_modules/jest react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts jest-config 12.1.1-alpha.2935e14d - 25.5.4 Depends on vulnerable versions of babel-jest Depends on vulnerable versions of jest-environment-jsdom Depends on vulnerable versions of jest-jasmine2 Depends on vulnerable versions of jest-util Depends on vulnerable versions of micromatch node_modules/jest-config jest-runner 21.0.0-alpha.1 - 22.4.4 || 23.4.0 - 23.6.0 Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-message-util node_modules/jest-runner jest-runtime 14.1.0 - 24.8.0 Depends on vulnerable versions of babel-plugin-istanbul Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-util Depends on vulnerable versions of micromatch Depends on vulnerable versions of yargs node_modules/jest-runtime loader-utils <1.4.1 Severity: critical Prototype pollution in webpack loader-utils - https://github.com/advisories/GHSA-76p3-8jx3-jpfq fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/react-dev-utils/node_modules/loader-utils react-dev-utils 0.4.0 - 12.0.0-next.60 Depends on vulnerable versions of browserslist Depends on vulnerable versions of globby Depends on vulnerable versions of immer Depends on vulnerable versions of loader-utils Depends on vulnerable versions of recursive-readdir Depends on vulnerable versions of shell-quote node_modules/react-dev-utils react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts merge <2.1.1 Severity: high Prototype Pollution in merge - https://github.com/advisories/GHSA-7wpw-2hjm-89gp fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/merge exec-sh <=0.3.1 Depends on vulnerable versions of merge node_modules/exec-sh sane 1.0.4 - 4.0.2 Depends on vulnerable versions of exec-sh Depends on vulnerable versions of watch node_modules/sane jest-haste-map 16.1.0-alpha.691b0e22 - 24.0.0 Depends on vulnerable versions of micromatch Depends on vulnerable versions of sane node_modules/jest-haste-map jest-cli 0.10.2 - 24.8.0 Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-environment-jsdom Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-snapshot Depends on vulnerable versions of micromatch Depends on vulnerable versions of node-notifier Depends on vulnerable versions of yargs node_modules/jest-cli jest 13.3.0-alpha.4eb0c908 - 23.6.0 Depends on vulnerable versions of jest-cli node_modules/jest react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts jest-runtime 14.1.0 - 24.8.0 Depends on vulnerable versions of babel-plugin-istanbul Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-util Depends on vulnerable versions of micromatch Depends on vulnerable versions of yargs node_modules/jest-runtime watch >=0.14.0 Depends on vulnerable versions of exec-sh node_modules/watch minimatch <3.0.5 Severity: high minimatch ReDoS vulnerability - https://github.com/advisories/GHSA-f8q6-p94x-37v3 fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/recursive-readdir/node_modules/minimatch recursive-readdir 1.2.0 - 2.2.2 Depends on vulnerable versions of minimatch node_modules/recursive-readdir react-dev-utils 0.4.0 - 12.0.0-next.60 Depends on vulnerable versions of browserslist Depends on vulnerable versions of globby Depends on vulnerable versions of immer Depends on vulnerable versions of loader-utils Depends on vulnerable versions of recursive-readdir Depends on vulnerable versions of shell-quote node_modules/react-dev-utils react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts node-forge <=1.2.1 Severity: high Improper Verification of Cryptographic Signature in node-forge - https://github.com/advisories/GHSA-cfm4-qjh2-4765 URL parsing in node-forge could lead to undesired behavior. - https://github.com/advisories/GHSA-gf8q-jrpm-jvxq fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/node-forge selfsigned 1.1.1 - 1.10.14 Depends on vulnerable versions of node-forge node_modules/selfsigned webpack-dev-server 2.0.0-beta - 4.7.2 Depends on vulnerable versions of ansi-html Depends on vulnerable versions of chokidar Depends on vulnerable versions of selfsigned Depends on vulnerable versions of sockjs Depends on vulnerable versions of yargs node_modules/webpack-dev-server react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts node-notifier <8.0.1 Severity: moderate OS Command Injection in node-notifier - https://github.com/advisories/GHSA-5fw9-fq32-wv5p fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/node-notifier jest-cli 0.10.2 - 24.8.0 Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-environment-jsdom Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-snapshot Depends on vulnerable versions of micromatch Depends on vulnerable versions of node-notifier Depends on vulnerable versions of yargs node_modules/jest-cli jest 13.3.0-alpha.4eb0c908 - 23.6.0 Depends on vulnerable versions of jest-cli node_modules/jest react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts nth-check <2.0.1 Severity: high Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/svgo/node_modules/nth-check css-select <=3.1.0 Depends on vulnerable versions of nth-check node_modules/svgo/node_modules/css-select svgo 1.0.0 - 1.3.2 Depends on vulnerable versions of css-select node_modules/svgo @svgr/core <=3.1.0 Depends on vulnerable versions of svgo node_modules/@svgr/core @svgr/webpack <=3.1.0 Depends on vulnerable versions of @svgr/core node_modules/@svgr/webpack postcss-svgo 4.0.0-nightly.2020.1.9 - 5.0.0-rc.2 Depends on vulnerable versions of svgo node_modules/postcss-svgo cssnano-preset-default <=4.0.8 Depends on vulnerable versions of postcss-svgo node_modules/cssnano-preset-default cssnano 4.0.0-nightly.2020.1.9 - 4.1.11 Depends on vulnerable versions of cssnano-preset-default node_modules/cssnano optimize-css-assets-webpack-plugin 3.2.1 || 5.0.0 - 5.0.8 Depends on vulnerable versions of cssnano node_modules/optimize-css-assets-webpack-plugin react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts postcss <7.0.36 Severity: moderate Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5 fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/postcss css-loader 0.15.0 - 1.0.1 Depends on vulnerable versions of icss-utils Depends on vulnerable versions of postcss Depends on vulnerable versions of postcss-modules-values node_modules/css-loader react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts icss-utils <=3.0.1 Depends on vulnerable versions of postcss node_modules/icss-utils postcss-modules-extract-imports <=1.2.1 Depends on vulnerable versions of postcss node_modules/postcss-modules-extract-imports postcss-modules-local-by-default <=1.2.0 Depends on vulnerable versions of postcss node_modules/postcss-modules-local-by-default postcss-modules-scope <=1.1.0 Depends on vulnerable versions of postcss node_modules/postcss-modules-scope postcss-modules-values <=1.3.0 Depends on vulnerable versions of postcss node_modules/postcss-modules-values react-dev-utils 0.4.0 - 12.0.0-next.60 Severity: critical react-dev-utils OS Command Injection in function `getProcessForPort` - https://github.com/advisories/GHSA-5q6m-3h65-w53x Depends on vulnerable versions of browserslist Depends on vulnerable versions of globby Depends on vulnerable versions of immer Depends on vulnerable versions of loader-utils Depends on vulnerable versions of recursive-readdir Depends on vulnerable versions of shell-quote fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/react-dev-utils react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts serialize-javascript <=3.0.0 Severity: high Insecure serialization leading to RCE in serialize-javascript - https://github.com/advisories/GHSA-hxcc-f52p-wc94 Cross-Site Scripting in serialize-javascript - https://github.com/advisories/GHSA-h9rv-jmmf-4pgx fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/serialize-javascript terser-webpack-plugin <=1.4.1 Depends on vulnerable versions of serialize-javascript Depends on vulnerable versions of terser node_modules/terser-webpack-plugin react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts uglifyjs-webpack-plugin >=1.1.3 Depends on vulnerable versions of cacache Depends on vulnerable versions of serialize-javascript node_modules/uglifyjs-webpack-plugin webpack 4.3.0 - 4.25.1 Depends on vulnerable versions of uglifyjs-webpack-plugin node_modules/webpack shell-quote <=1.7.2 Severity: critical Improper Neutralization of Special Elements used in a Command in Shell-quote - https://github.com/advisories/GHSA-g4rg-993r-mgx7 fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/shell-quote react-dev-utils 0.4.0 - 12.0.0-next.60 Depends on vulnerable versions of browserslist Depends on vulnerable versions of globby Depends on vulnerable versions of immer Depends on vulnerable versions of loader-utils Depends on vulnerable versions of recursive-readdir Depends on vulnerable versions of shell-quote node_modules/react-dev-utils react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts sockjs <0.3.20 Severity: moderate Improper Input Validation in SocksJS-Node - https://github.com/advisories/GHSA-c9g6-9335-x697 fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/sockjs webpack-dev-server 2.0.0-beta - 4.7.2 Depends on vulnerable versions of ansi-html Depends on vulnerable versions of chokidar Depends on vulnerable versions of selfsigned Depends on vulnerable versions of sockjs Depends on vulnerable versions of yargs node_modules/webpack-dev-server react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts ssri 5.2.2 - 6.0.1 Severity: high Regular Expression Denial of Service (ReDoS) - https://github.com/advisories/GHSA-vx3p-948g-6vhq fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/uglifyjs-webpack-plugin/node_modules/ssri cacache 10.0.4 - 11.0.0 Depends on vulnerable versions of ssri node_modules/uglifyjs-webpack-plugin/node_modules/cacache uglifyjs-webpack-plugin >=1.1.3 Depends on vulnerable versions of cacache Depends on vulnerable versions of serialize-javascript node_modules/uglifyjs-webpack-plugin webpack 4.3.0 - 4.25.1 Depends on vulnerable versions of uglifyjs-webpack-plugin node_modules/webpack react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts terser <4.8.1 Severity: high Terser insecure use of regular expressions before v4.8.1 and v5.14.2 leads to ReDoS - https://github.com/advisories/GHSA-4wf5-vphf-c2xc fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/terser terser-webpack-plugin <=1.4.1 Depends on vulnerable versions of serialize-javascript Depends on vulnerable versions of terser node_modules/terser-webpack-plugin react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts yargs-parser 6.0.0 - 13.1.1 Severity: moderate yargs-parser Vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-p9pc-299p-vxgp fix available via `npm audit fix --force` Will install react-scripts@5.0.1, which is a breaking change node_modules/webpack-dev-server/node_modules/yargs-parser node_modules/yargs/node_modules/yargs-parser yargs 8.0.0-candidate.0 - 12.0.5 Depends on vulnerable versions of yargs-parser node_modules/webpack-dev-server/node_modules/yargs node_modules/yargs jest-cli 0.10.2 - 24.8.0 Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-environment-jsdom Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-snapshot Depends on vulnerable versions of micromatch Depends on vulnerable versions of node-notifier Depends on vulnerable versions of yargs node_modules/jest-cli jest 13.3.0-alpha.4eb0c908 - 23.6.0 Depends on vulnerable versions of jest-cli node_modules/jest react-scripts 0.1.0 - 5.0.0-next.60 Depends on vulnerable versions of css-loader Depends on vulnerable versions of fork-ts-checker-webpack-plugin-alt Depends on vulnerable versions of jest Depends on vulnerable versions of optimize-css-assets-webpack-plugin Depends on vulnerable versions of react-dev-utils Depends on vulnerable versions of terser-webpack-plugin Depends on vulnerable versions of webpack Depends on vulnerable versions of webpack-dev-server node_modules/react-scripts jest-runtime 14.1.0 - 24.8.0 Depends on vulnerable versions of babel-plugin-istanbul Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-haste-map Depends on vulnerable versions of jest-message-util Depends on vulnerable versions of jest-util Depends on vulnerable versions of micromatch Depends on vulnerable versions of yargs node_modules/jest-runtime webpack-dev-server 2.0.0-beta - 4.7.2 Depends on vulnerable versions of ansi-html Depends on vulnerable versions of chokidar Depends on vulnerable versions of selfsigned Depends on vulnerable versions of sockjs Depends on vulnerable versions of yargs node_modules/webpack-dev-server 72 vulnerabilities (13 low, 19 moderate, 37 high, 3 critical) To address issues that do not require attention, run: npm audit fix To address all issues (including breaking changes), run: npm audit fix --force

[ERR REPORT] | Report after running npm audit fix --force