Skip to content

Instantly share code, notes, and snippets.

@IAD

IAD/gist:9e2ff177c3bb2d48a976587d0ede5182

Created May 1, 2019 14:45
Show Gist options
  • Save IAD/9e2ff177c3bb2d48a976587d0ede5182 to your computer and use it in GitHub Desktop.
Save IAD/9e2ff177c3bb2d48a976587d0ede5182 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
> npm audit
=== npm audit security report ===
┌──────────────────────────────────────────────────────────────────────────────┐
│ Manual Review │
│ Some vulnerabilities require your attention to resolve │
│ │
│ Visit https://go.npm.me/audit-guide for additional guidance │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Arbitrary File Overwrite │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ tar │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=4.4.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @angular-devkit/build-angular [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @angular-devkit/build-angular > node-sass > node-gyp > tar │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/803 │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 1 high severity vulnerability in 42611 scanned packages
1 vulnerability requires manual review. See the full report for details.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment