retirejs-report.txt

Loading from cache: https://raw.githubusercontent.com/RetireJS/retire.js/master/repository/jsrepository.json
Loading from cache: https://raw.githubusercontent.com/RetireJS/retire.js/master/repository/npmrepository.json
D:\projects\RetireJSDemo\public\bower_components\angular\angular.js
 ↳ angularjs 1.2.16 has known vulnerabilities: severity: medium; summary: The attribute usemap can be used as a security exploit; https://github.com/angular/angular.js/blob/master/CHANGELOG.md severity: medium; summary: Universal CSP bypass via add-on in Firefox; https://github.com/mozilla/addons-linter/issues/1000#issuecomment-282083435 http://pastebin.com/raw/kGrdaypP severity: medium; summary: DOS in $sanitize; https://github.com/angular/angular.js/blob/master/CHANGELOG.md severity: low; summary: XSS in $sanitize in Safari/Firefox; https://github.com/angular/angular.js/commit/8f31f1ff43b673a24f84422d5c13d6312b2c4d94
D:\projects\RetireJSDemo\public\bower_components\angular\angular.min.js
 ↳ angularjs 1.2.16 has known vulnerabilities: severity: medium; summary: The attribute usemap can be used as a security exploit; https://github.com/angular/angular.js/blob/master/CHANGELOG.md severity: medium; summary: Universal CSP bypass via add-on in Firefox; https://github.com/mozilla/addons-linter/issues/1000#issuecomment-282083435 http://pastebin.com/raw/kGrdaypP severity: medium; summary: DOS in $sanitize; https://github.com/angular/angular.js/blob/master/CHANGELOG.md severity: low; summary: XSS in $sanitize in Safari/Firefox; https://github.com/angular/angular.js/commit/8f31f1ff43b673a24f84422d5c13d6312b2c4d94
cookie-signature 1.0.4 has known vulnerabilities:  severity: medium; advisory: Timing attack vulnerability; https://nodesecurity.io/advisories/134
retirejsdemo 1.0.0
↳ cookie-signature 1.0.4
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ ms 0.6.2
send 0.8.1 has known vulnerabilities:  severity: medium; CVE: CVE-2014-6394, advisory: send-directory-traversal; https://nodesecurity.io/advisories/32 severity: medium; summary: discloses root path; https://nodesecurity.io/advisories/56 https://github.com/pillarjs/send/pull/70 https://github.com/expressjs/serve-static/blob/master/HISTORY.md#181--2015-01-20
retirejsdemo 1.0.0
↳ send 0.8.1
serve-static 1.5.4 has known vulnerabilities:  severity: medium; summary: serve-static_open-redirect; https://nodesecurity.io/advisories/35
retirejsdemo 1.0.0
↳ serve-static 1.5.4
send 0.8.5 has known vulnerabilities:  severity: medium; summary: discloses root path; https://nodesecurity.io/advisories/56 https://github.com/pillarjs/send/pull/70 https://github.com/expressjs/serve-static/blob/master/HISTORY.md#181--2015-01-20
retirejsdemo 1.0.0
↳ serve-static 1.5.4
 ↳ send 0.8.5
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ serve-static 1.5.4
 ↳ send 0.8.5
  ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ serve-static 1.5.4
 ↳ send 0.8.5
  ↳ debug 1.0.4
   ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ send 0.8.1
 ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ send 0.8.1
 ↳ debug 1.0.4
  ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ finalhandler 0.1.0
 ↳ debug 1.0.4
  ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ debug 1.0.4
 ↳ ms 0.6.2
cookie-signature 1.0.4 has known vulnerabilities:  severity: medium; advisory: Timing attack vulnerability; https://nodesecurity.io/advisories/134
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ cookie-signature 1.0.4
send 0.8.1 has known vulnerabilities:  severity: medium; CVE: CVE-2014-6394, advisory: send-directory-traversal; https://nodesecurity.io/advisories/32 severity: medium; summary: discloses root path; https://nodesecurity.io/advisories/56 https://github.com/pillarjs/send/pull/70 https://github.com/expressjs/serve-static/blob/master/HISTORY.md#181--2015-01-20
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ send 0.8.1
serve-static 1.5.4 has known vulnerabilities:  severity: medium; summary: serve-static_open-redirect; https://nodesecurity.io/advisories/35
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ serve-static 1.5.4
send 0.8.5 has known vulnerabilities:  severity: medium; summary: discloses root path; https://nodesecurity.io/advisories/56 https://github.com/pillarjs/send/pull/70 https://github.com/expressjs/serve-static/blob/master/HISTORY.md#181--2015-01-20
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ serve-static 1.5.4
  ↳ send 0.8.5
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ serve-static 1.5.4
  ↳ send 0.8.5
   ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ serve-static 1.5.4
  ↳ send 0.8.5
   ↳ debug 1.0.4
    ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ send 0.8.1
  ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ send 0.8.1
  ↳ debug 1.0.4
   ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ finalhandler 0.1.0
  ↳ debug 1.0.4
   ↳ ms 0.6.2
ms 0.6.2 has known vulnerabilities:  severity: medium; summary: Regular expression denial of service; https://nodesecurity.io/advisories/46
retirejsdemo 1.0.0
↳ express 4.8.0
 ↳ debug 1.0.4
  ↳ ms 0.6.2