Bump http-cache-semantics from 4.0.0 to 4.1.1 #10

dependabot · 2023-02-03T02:16:01Z

Bumps http-cache-semantics from 4.0.0 to 4.1.1.

Commits

2449650 Update mocha
560b2d8 Don't use regex to trim whitespace
b1bdb92 Remove linting package zoo
c20dc7e Cache 308
ed83aec Explain trust server date
1b35980 rfc 5861 (stale-if-error, stale-while-revalidate)
2c2fac2 Drop trustServerDate
eb7028f Test names
84cc9a8 Bump
ae5ecd5 Add status to tests
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) from 4.0.0 to 4.1.1. - [Release notes](https://github.com/kornelski/http-cache-semantics/releases) - [Commits](kornelski/http-cache-semantics@v4.0.0...v4.1.1) --- updated-dependencies: - dependency-name: http-cache-semantics dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>

prisma-cloud-devsecops

Prisma Cloud has found errors in this PR ⬇️

prisma-cloud-devsecops · 2023-02-03T02:18:00Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


path-is-inside 1.0.2 / package-lock.json

Noncompliant License (WTFPL)

This package contains a license that is not OSI-approved.

prisma-cloud-devsecops

Prisma Cloud has found errors in this PR ⬇️

prisma-cloud-devsecops · 2023-02-03T02:18:03Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


undefsafe 2.0.2 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2019-10795 MEDIUM 6.3 2.0.3 Open

prisma-cloud-devsecops · 2023-02-03T02:18:03Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


ansi-regex 3.0.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-3807 HIGH 7.5 4.1.1 Open

prisma-cloud-devsecops · 2023-02-03T02:18:03Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


unset-value 1.0.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

PRISMA-2022-0049 HIGH 8 2.0.1 Open

prisma-cloud-devsecops · 2023-02-03T02:18:03Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


set-value 0.4.3 / package-lock.json

Total vulnerabilities: 2

Critical: 2 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-23440 CRITICAL 9.8 2.0.1 Open

CVE-2019-10747 CRITICAL 9.8 2.0.1 Open

prisma-cloud-devsecops · 2023-02-03T02:18:03Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


node-fetch 2.2.0 / package-lock.json

Total vulnerabilities: 2

Critical: 0 High: 0 Medium: 2 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-0235 MEDIUM 6.1 2.6.7 Open

CVE-2020-15168 MEDIUM 5.3 2.6.1 Open

prisma-cloud-devsecops · 2023-02-03T02:18:08Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


apollo-server-core 2.1.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

GHSA-w42g-7vfc-xf37 LOW 4 2.14.2 Open

prisma-cloud-devsecops · 2023-02-03T02:18:08Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


bson 1.0.9 / package-lock.json

Total vulnerabilities: 2

Critical: 1 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-7610 CRITICAL 9.8 1.1.4 Open

CVE-2019-2391 LOW 4 1.1.4 Open

prisma-cloud-devsecops · 2023-02-03T02:18:08Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


ajv 5.5.2 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-15366 LOW 4 6.12.3 Open

prisma-cloud-devsecops · 2023-02-03T02:18:08Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


qs 6.5.2 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-24999 HIGH 7.5 6.10.3 Open

prisma-cloud-devsecops · 2023-02-03T02:18:09Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


async 2.6.1 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-43138 HIGH 7 2.6.4 Open

prisma-cloud-devsecops · 2023-02-03T02:19:07Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


undefsafe 2.0.2 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2019-10795 MEDIUM 6.3 2.0.3 Open

prisma-cloud-devsecops · 2023-02-03T02:19:08Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


ansi-regex 3.0.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-3807 HIGH 7.5 4.1.1 Open

prisma-cloud-devsecops · 2023-02-03T02:19:09Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


unset-value 1.0.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

PRISMA-2022-0049 HIGH 8 2.0.1 Open

prisma-cloud-devsecops · 2023-02-03T02:19:11Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


set-value 0.4.3 / package-lock.json

Total vulnerabilities: 2

Critical: 2 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-23440 CRITICAL 9.8 2.0.1 Open

CVE-2019-10747 CRITICAL 9.8 2.0.1 Open

prisma-cloud-devsecops · 2023-02-03T02:19:12Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


node-fetch 2.2.0 / package-lock.json

Total vulnerabilities: 2

Critical: 0 High: 0 Medium: 2 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-0235 MEDIUM 6.1 2.6.7 Open

CVE-2020-15168 MEDIUM 5.3 2.6.1 Open

prisma-cloud-devsecops · 2023-02-03T02:19:13Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


mongoose 5.2.14 / package-lock.json

Total vulnerabilities: 3

Critical: 2 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-2564 CRITICAL 9.8 6.4.6 Open

CVE-2019-17426 CRITICAL 9.1 - Open

PRISMA-2021-0067 HIGH - 5.12.2 Open

prisma-cloud-devsecops · 2023-02-03T02:19:14Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


mongodb 3.1.4 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

GHSA-mh5c-679w-hh4r HIGH 7 3.1.13 Open

prisma-cloud-devsecops · 2023-02-03T02:19:15Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


mpath 0.5.1 / package-lock.json

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-23438 CRITICAL 9.8 0.8.4 Open

prisma-cloud-devsecops · 2023-02-03T02:19:17Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


qs 6.5.1 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-24999 HIGH 7.5 6.10.3 Open

prisma-cloud-devsecops · 2023-02-03T02:19:18Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


mixin-deep 1.3.1 / package-lock.json

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2019-10746 CRITICAL 9.8 1.3.2 Open

prisma-cloud-devsecops · 2023-02-03T02:19:19Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


bson 1.1.0 / package-lock.json

Total vulnerabilities: 2

Critical: 1 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-7610 CRITICAL 9.8 1.1.4 Open

CVE-2019-2391 LOW 4 1.1.4 Open

prisma-cloud-devsecops · 2023-02-03T02:19:20Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


protobufjs 6.8.8 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-25878 HIGH 7.5 6.11.3 Open

prisma-cloud-devsecops · 2023-02-03T02:19:21Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


object-path 0.11.4 / package-lock.json

Total vulnerabilities: 3

Critical: 1 High: 2 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-15256 CRITICAL 9.8 0.11.5 Open

CVE-2021-3805 HIGH 7.5 0.11.8 Open

CVE-2021-23434 HIGH 8.6 0.11.6 Open

prisma-cloud-devsecops · 2023-02-03T02:19:23Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


set-value 2.0.0 / package-lock.json

Total vulnerabilities: 2

Critical: 2 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-23440 CRITICAL 9.8 2.0.1 Open

CVE-2019-10747 CRITICAL 9.8 2.0.1 Open

prisma-cloud-devsecops · 2023-02-03T02:19:24Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


glob-parent 3.1.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-28469 HIGH 7.5 5.1.2 Open

prisma-cloud-devsecops · 2023-02-03T02:19:25Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


mquery 3.2.0 / package-lock.json

Total vulnerabilities: 2

Critical: 0 High: 1 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

PRISMA-2021-0060 HIGH - 3.2.5 Open

CVE-2020-35149 MEDIUM 5.3 3.2.3 Open

prisma-cloud-devsecops · 2023-02-03T02:19:26Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


lodash 4.17.10 / package-lock.json

Total vulnerabilities: 6

Critical: 1 High: 2 Medium: 3 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2019-10744 CRITICAL 9.1 4.17.12 Open

CVE-2021-23337 HIGH 7.2 4.17.21 Open

CVE-2020-8203 HIGH 7.4 4.17.20 Open

CVE-2020-28500 MEDIUM 5.3 4.17.21 Open

CVE-2019-1010266 MEDIUM 6.5 4.17.11 Open

CVE-2018-16487 MEDIUM 5.6 4.17.11 Open

prisma-cloud-devsecops · 2023-02-03T02:19:27Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


tar 4.4.1 / package-lock.json

Total vulnerabilities: 7

Critical: 0 High: 6 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-32804 HIGH 8.1 4.4.14 Open

CVE-2021-32803 HIGH 8.1 4.4.15 Open

CVE-2021-37701 HIGH 8.6 4.4.16 Open

CVE-2018-20834 HIGH 7 4.4.2 Open

CVE-2021-37713 HIGH 7 4.4.18 Open

CVE-2021-37712 HIGH 7 4.4.18 Open

PRISMA-2021-0096 LOW 3.5 6.1.4 Open

prisma-cloud-devsecops · 2023-02-03T02:19:28Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


json-schema 0.2.3 / package-lock.json

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-3918 CRITICAL 9 0.4.0 Open

prisma-cloud-devsecops · 2023-02-03T02:19:30Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


minimist 1.2.0 / package-lock.json

Total vulnerabilities: 2

Critical: 1 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-44906 CRITICAL 9.8 1.2.6 Open

CVE-2020-7598 MEDIUM 5.6 1.2.2 Open

prisma-cloud-devsecops · 2023-02-03T02:19:31Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


http-cache-semantics 4.0.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-25881 LOW 4 4.1.1 Open

prisma-cloud-devsecops · 2023-02-03T02:19:32Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


got 6.7.1 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-33987 MEDIUM 5.3 12.1.0 Open

prisma-cloud-devsecops · 2023-02-03T02:19:33Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


flatmap-stream 0.1.0 / package-lock.json

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

GHSA-mh6f-8j2x-4483 CRITICAL 9 - Open

prisma-cloud-devsecops · 2023-02-03T02:19:34Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


event-stream 3.3.6 / package-lock.json

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

GHSA-mh6f-8j2x-4483 CRITICAL 9 4.0.0 Open

prisma-cloud-devsecops · 2023-02-03T02:19:36Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


minimatch 3.0.4 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-3517 HIGH 7.5 3.0.5 Open

prisma-cloud-devsecops · 2023-02-03T02:19:37Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


dot-prop 4.2.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-8116 HIGH 7.3 4.2.1 Open

prisma-cloud-devsecops · 2023-02-03T02:19:38Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


dicer 0.2.5 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-24434 HIGH 7 - Open

prisma-cloud-devsecops · 2023-02-03T02:19:39Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


chownr 1.0.1 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2017-18869 LOW 2.5 1.1.0 Open

prisma-cloud-devsecops · 2023-02-03T02:19:40Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


minimist 0.0.8 / package-lock.json

Total vulnerabilities: 2

Critical: 1 High: 0 Medium: 1 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-44906 CRITICAL 9.8 1.2.6 Open

CVE-2020-7598 MEDIUM 5.6 1.2.2 Open

prisma-cloud-devsecops · 2023-02-03T02:19:41Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


decode-uri-component 0.2.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-38900 LOW 1 0.2.1 Open

prisma-cloud-devsecops · 2023-02-03T02:19:43Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


ini 1.3.5 / package-lock.json

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-7788 CRITICAL 9.8 1.3.6 Open

prisma-cloud-devsecops · 2023-02-03T02:19:44Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


kind-of 6.0.2 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2019-20149 HIGH 7 6.0.3 Open

prisma-cloud-devsecops · 2023-02-03T02:19:45Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


apollo-server-express 2.1.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

GHSA-w42g-7vfc-xf37 LOW 4 2.14.2 Open

prisma-cloud-devsecops · 2023-02-03T02:19:46Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


apollo-server-core 2.1.0 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

GHSA-w42g-7vfc-xf37 LOW 4 2.14.2 Open

prisma-cloud-devsecops · 2023-02-03T02:19:47Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


bson 1.0.9 / package-lock.json

Total vulnerabilities: 2

Critical: 1 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-7610 CRITICAL 9.8 1.1.4 Open

CVE-2019-2391 LOW 4 1.1.4 Open

prisma-cloud-devsecops · 2023-02-03T02:19:49Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


ajv 5.5.2 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 0 Low: 1

Vulnerability ID Severity CVSS Fixed in Status

CVE-2020-15366 LOW 4 6.12.3 Open

prisma-cloud-devsecops · 2023-02-03T02:19:50Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


qs 6.5.2 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2022-24999 HIGH 7.5 6.10.3 Open

prisma-cloud-devsecops · 2023-02-03T02:19:51Z

package-lock.json

@@ -1559,7 +1559,7 @@
    },
    "chalk": {
      "version": "1.1.3",
-      "resolved": "http://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",


async 2.6.1 / package-lock.json

Total vulnerabilities: 1

Critical: 0 High: 1 Medium: 0 Low: 0

Vulnerability ID Severity CVSS Fixed in Status

CVE-2021-43138 HIGH 7 2.6.4 Open

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 3, 2023

prisma-cloud-devsecops bot reviewed Feb 3, 2023

View reviewed changes

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2021-23440	CRITICAL	9.8	`2.0.1`	Open
CVE-2019-10747	CRITICAL	9.8	`2.0.1`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2022-0235	MEDIUM	6.1	`2.6.7`	Open
CVE-2020-15168	MEDIUM	5.3	`2.6.1`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2020-7610	CRITICAL	9.8	`1.1.4`	Open
CVE-2019-2391	LOW	4	`1.1.4`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2022-2564	CRITICAL	9.8	`6.4.6`	Open
CVE-2019-17426	CRITICAL	9.1	`-`	Open
PRISMA-2021-0067	HIGH	-	`5.12.2`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2020-15256	CRITICAL	9.8	`0.11.5`	Open
CVE-2021-3805	HIGH	7.5	`0.11.8`	Open
CVE-2021-23434	HIGH	8.6	`0.11.6`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
PRISMA-2021-0060	HIGH	-	`3.2.5`	Open
CVE-2020-35149	MEDIUM	5.3	`3.2.3`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2019-10744	CRITICAL	9.1	`4.17.12`	Open
CVE-2021-23337	HIGH	7.2	`4.17.21`	Open
CVE-2020-8203	HIGH	7.4	`4.17.20`	Open
CVE-2020-28500	MEDIUM	5.3	`4.17.21`	Open
CVE-2019-1010266	MEDIUM	6.5	`4.17.11`	Open
CVE-2018-16487	MEDIUM	5.6	`4.17.11`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2021-32804	HIGH	8.1	`4.4.14`	Open
CVE-2021-32803	HIGH	8.1	`4.4.15`	Open
CVE-2021-37701	HIGH	8.6	`4.4.16`	Open
CVE-2018-20834	HIGH	7	`4.4.2`	Open
CVE-2021-37713	HIGH	7	`4.4.18`	Open
CVE-2021-37712	HIGH	7	`4.4.18`	Open
PRISMA-2021-0096	LOW	3.5	`6.1.4`	Open

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2021-44906	CRITICAL	9.8	`1.2.6`	Open
CVE-2020-7598	MEDIUM	5.6	`1.2.2`	Open

Bump http-cache-semantics from 4.0.0 to 4.1.1 #10

Are you sure you want to change the base?

Bump http-cache-semantics from 4.0.0 to 4.1.1 #10

Conversation

dependabot bot commented on behalf of github Feb 3, 2023

prisma-cloud-devsecops bot left a comment

Choose a reason for hiding this comment

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

path-is-inside 1.0.2 / package-lock.json

prisma-cloud-devsecops bot left a comment

Choose a reason for hiding this comment

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

undefsafe 2.0.2 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

ansi-regex 3.0.0 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

unset-value 1.0.0 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

set-value 0.4.3 / package-lock.json

Total vulnerabilities: 2

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

node-fetch 2.2.0 / package-lock.json

Total vulnerabilities: 2

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

apollo-server-core 2.1.0 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

bson 1.0.9 / package-lock.json

Total vulnerabilities: 2

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

ajv 5.5.2 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

qs 6.5.2 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

async 2.6.1 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

undefsafe 2.0.2 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

ansi-regex 3.0.0 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

unset-value 1.0.0 / package-lock.json

Total vulnerabilities: 1

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

set-value 0.4.3 / package-lock.json

Total vulnerabilities: 2

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

node-fetch 2.2.0 / package-lock.json

Total vulnerabilities: 2

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

mongoose 5.2.14 / package-lock.json

Total vulnerabilities: 3

prisma-cloud-devsecops bot Feb 3, 2023

Choose a reason for hiding this comment

mongodb 3.1.4 / package-lock.json

Total vulnerabilities: 1