This run took 143 seconds.
$ date --- stdout --- Sun Oct 5 05:17:49 UTC 2025 --- end --- $ git clone file:///srv/git/mediawiki-extensions-GlobalWatchlist.git repo --depth=1 -b REL1_39 --- stderr --- Cloning into 'repo'... --- stdout --- --- end --- $ git config user.name libraryupgrader --- stdout --- --- end --- $ git config user.email tools.libraryupgrader@tools.wmflabs.org --- stdout --- --- end --- $ git submodule update --init --- stdout --- --- end --- $ grr init --- stdout --- Installed commit-msg hook. --- end --- $ git show-ref refs/heads/REL1_39 --- stdout --- ca6b54f13cf4ba6bb0709829b63af979c4975523 refs/heads/REL1_39 --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "@jest/transform": { "name": "@jest/transform", "severity": "moderate", "isDirect": false, "via": [ "jest-haste-map" ], "effects": [ "@storybook/addon-docs" ], "range": "<=26.6.2", "nodes": [ "node_modules/@jest/transform" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@mdx-js/mdx": { "name": "@mdx-js/mdx", "severity": "high", "isDirect": false, "via": [ "remark-mdx", "remark-parse" ], "effects": [ "@storybook/codemod", "@storybook/csf-tools", "@storybook/mdx1-csf" ], "range": "<=1.6.22", "nodes": [ "node_modules/@mdx-js/mdx" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/addon-a11y": { "name": "@storybook/addon-a11y", "severity": "low", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/theming", "global" ], "effects": [], "range": "4.0.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y" ], "fixAvailable": { "name": "@storybook/addon-a11y", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/addon-actions": { "name": "@storybook/addon-actions", "severity": "low", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/theming", "global", "telejson" ], "effects": [], "range": "3.3.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-actions" ], "fixAvailable": { "name": "@storybook/addon-actions", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/addon-backgrounds": { "name": "@storybook/addon-backgrounds", "severity": "low", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/theming", "global" ], "effects": [], "range": "3.3.14 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-backgrounds" ], "fixAvailable": { "name": "@storybook/addon-backgrounds", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/addon-controls": { "name": "@storybook/addon-controls", "severity": "moderate", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/core-common", "@storybook/store", "@storybook/theming" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-controls" ], "fixAvailable": { "name": "@storybook/addon-controls", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/addon-docs": { "name": "@storybook/addon-docs", "severity": "high", "isDirect": true, "via": [ "@jest/transform", "@storybook/addons", "@storybook/api", "@storybook/components", "@storybook/core-common", "@storybook/docs-tools", "@storybook/mdx1-csf", "@storybook/preview-web", "@storybook/source-loader", "@storybook/store", "@storybook/theming", "global" ], "effects": [], "range": "<=7.0.3 || 7.1.0-alpha.0 - 7.1.0-rc.2", "nodes": [ "node_modules/@storybook/addon-docs" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/addon-storysource": { "name": "@storybook/addon-storysource", "severity": "moderate", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/router", "@storybook/source-loader", "@storybook/theming", "react-syntax-highlighter" ], "effects": [], "range": "<=7.6.0-beta.2", "nodes": [ "node_modules/@storybook/addon-storysource" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "@storybook/addon-viewport": { "name": "@storybook/addon-viewport", "severity": "low", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/theming", "global" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-viewport" ], "fixAvailable": { "name": "@storybook/addon-viewport", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/addons": { "name": "@storybook/addons", "severity": "low", "isDirect": false, "via": [ "@storybook/api", "@storybook/client-logger", "@storybook/router", "@storybook/router", "@storybook/theming", "@storybook/theming", "global" ], "effects": [ "@storybook/addon-actions", "@storybook/addon-backgrounds", "@storybook/addon-controls", "@storybook/addon-storysource", "@storybook/addon-viewport", "@storybook/ui", "@storybook/vue" ], "range": "4.0.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/addons", "node_modules/@storybook/addon-actions/node_modules/@storybook/addons", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/addons", "node_modules/@storybook/addon-controls/node_modules/@storybook/addons", "node_modules/@storybook/addon-docs/node_modules/@storybook/addons", "node_modules/@storybook/addon-viewport/node_modules/@storybook/addons", "node_modules/@storybook/addons", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/addons", "node_modules/@storybook/core-client/node_modules/@storybook/addons", "node_modules/@storybook/core-server/node_modules/@storybook/addons", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/addons", "node_modules/@storybook/preview-web/node_modules/@storybook/addons", "node_modules/@storybook/source-loader/node_modules/@storybook/addons", "node_modules/@storybook/store/node_modules/@storybook/addons", "node_modules/@storybook/ui/node_modules/@storybook/addons", "node_modules/@storybook/vue/node_modules/@storybook/addons" ], "fixAvailable": { "name": "@storybook/addon-actions", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/api": { "name": "@storybook/api", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "@storybook/router", "@storybook/router", "@storybook/theming", "@storybook/theming", "global", "telejson" ], "effects": [ "@storybook/addon-a11y", "@storybook/addon-actions", "@storybook/addon-backgrounds", "@storybook/addon-viewport", "@storybook/addons", "@storybook/ui" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/api", "node_modules/@storybook/addon-actions/node_modules/@storybook/api", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/api", "node_modules/@storybook/addon-controls/node_modules/@storybook/api", "node_modules/@storybook/addon-docs/node_modules/@storybook/api", "node_modules/@storybook/addon-viewport/node_modules/@storybook/api", "node_modules/@storybook/api", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/api", "node_modules/@storybook/core-client/node_modules/@storybook/api", "node_modules/@storybook/core-server/node_modules/@storybook/api", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/api", "node_modules/@storybook/preview-web/node_modules/@storybook/api", "node_modules/@storybook/source-loader/node_modules/@storybook/api", "node_modules/@storybook/store/node_modules/@storybook/api", "node_modules/@storybook/ui/node_modules/@storybook/api", "node_modules/@storybook/vue/node_modules/@storybook/addons/node_modules/@storybook/api" ], "fixAvailable": { "name": "@storybook/addon-backgrounds", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/builder-webpack4": { "name": "@storybook/builder-webpack4", "severity": "high", "isDirect": false, "via": [ "@storybook/addons", "@storybook/api", "@storybook/channel-postmessage", "@storybook/client-api", "@storybook/client-logger", "@storybook/components", "@storybook/core-common", "@storybook/preview-web", "@storybook/router", "@storybook/store", "@storybook/theming", "@storybook/ui", "autoprefixer", "css-loader", "fork-ts-checker-webpack-plugin", "global", "postcss", "postcss-flexbugs-fixes", "webpack", "webpack-dev-middleware" ], "effects": [], "range": "*", "nodes": [ "node_modules/@storybook/builder-webpack4" ], "fixAvailable": true }, "@storybook/channel-postmessage": { "name": "@storybook/channel-postmessage", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "global", "telejson" ], "effects": [ "@storybook/client-api" ], "range": "3.1.2 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/@storybook/channel-postmessage", "node_modules/@storybook/core-client/node_modules/@storybook/channel-postmessage", "node_modules/@storybook/preview-web/node_modules/@storybook/channel-postmessage" ], "fixAvailable": true }, "@storybook/channel-websocket": { "name": "@storybook/channel-websocket", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "global", "telejson" ], "effects": [], "range": "3.1.2 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/channel-websocket" ], "fixAvailable": true }, "@storybook/cli": { "name": "@storybook/cli", "severity": "moderate", "isDirect": false, "via": [ "@storybook/codemod", "jscodeshift", "update-notifier" ], "effects": [ "storybook" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/cli" ], "fixAvailable": { "name": "storybook", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/client-api": { "name": "@storybook/client-api", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/channel-postmessage", "@storybook/client-logger", "@storybook/store", "global" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/@storybook/client-api", "node_modules/@storybook/core-client/node_modules/@storybook/client-api" ], "fixAvailable": true }, "@storybook/client-logger": { "name": "@storybook/client-logger", "severity": "low", "isDirect": false, "via": [ "global" ], "effects": [ "@storybook/addon-a11y", "@storybook/addon-actions", "@storybook/addon-backgrounds", "@storybook/addon-storysource", "@storybook/addon-viewport", "@storybook/addons", "@storybook/api", "@storybook/channel-postmessage", "@storybook/channel-websocket", "@storybook/client-api", "@storybook/components", "@storybook/router", "@storybook/source-loader", "@storybook/theming", "@storybook/ui" ], "range": "6.0.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-actions/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-controls/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-docs/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-viewport/node_modules/@storybook/client-logger", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/client-logger", "node_modules/@storybook/channel-websocket/node_modules/@storybook/client-logger", "node_modules/@storybook/client-logger", "node_modules/@storybook/core-client/node_modules/@storybook/client-logger", "node_modules/@storybook/core-server/node_modules/@storybook/client-logger", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/client-logger", "node_modules/@storybook/preview-web/node_modules/@storybook/client-logger", "node_modules/@storybook/source-loader/node_modules/@storybook/client-logger", "node_modules/@storybook/store/node_modules/@storybook/client-logger", "node_modules/@storybook/ui/node_modules/@storybook/client-logger", "node_modules/@storybook/vue/node_modules/@storybook/client-logger" ], "fixAvailable": { "name": "@storybook/addon-actions", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/codemod": { "name": "@storybook/codemod", "severity": "high", "isDirect": false, "via": [ "@mdx-js/mdx", "@storybook/csf-tools", "jscodeshift" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/codemod" ], "fixAvailable": true }, "@storybook/components": { "name": "@storybook/components", "severity": "moderate", "isDirect": false, "via": [ "@storybook/client-logger", "@storybook/theming", "@storybook/theming", "global", "react-syntax-highlighter" ], "effects": [ "@storybook/addon-storysource", "@storybook/ui" ], "range": "4.0.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/components", "node_modules/@storybook/addon-actions/node_modules/@storybook/components", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/components", "node_modules/@storybook/addon-controls/node_modules/@storybook/components", "node_modules/@storybook/addon-docs/node_modules/@storybook/components", "node_modules/@storybook/addon-viewport/node_modules/@storybook/components", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/components", "node_modules/@storybook/components", "node_modules/@storybook/ui/node_modules/@storybook/components" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "@storybook/core": { "name": "@storybook/core", "severity": "high", "isDirect": false, "via": [ "@storybook/core-client", "@storybook/core-server" ], "effects": [], "range": "6.2.0-alpha.0 - 6.5.17-alpha.0", "nodes": [ "node_modules/@storybook/core" ], "fixAvailable": true }, "@storybook/core-client": { "name": "@storybook/core-client", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/channel-postmessage", "@storybook/channel-websocket", "@storybook/client-api", "@storybook/client-logger", "@storybook/preview-web", "@storybook/store", "@storybook/ui", "global" ], "effects": [ "@storybook/core-server" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/core-client" ], "fixAvailable": true }, "@storybook/core-common": { "name": "@storybook/core-common", "severity": "moderate", "isDirect": false, "via": [ "telejson", "webpack" ], "effects": [ "@storybook/addon-controls", "@storybook/addon-docs", "@storybook/vue" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/@storybook/core-common", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/core-common", "node_modules/@storybook/core-common", "node_modules/@storybook/core-server/node_modules/@storybook/core-common", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/core-common", "node_modules/@storybook/vue/node_modules/@storybook/core-common" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/core-server": { "name": "@storybook/core-server", "severity": "high", "isDirect": false, "via": [ "@storybook/builder-webpack4", "@storybook/core-client", "@storybook/core-common", "@storybook/csf-tools", "@storybook/manager-webpack4", "@storybook/store", "cpy", "ip", "telejson", "webpack" ], "effects": [ "@storybook/core" ], "range": "<=7.6.19 || 8.0.0-alpha.0 - 8.1.5 || 8.2.0-alpha.0 - 8.2.0-beta.3", "nodes": [ "node_modules/@storybook/core-server" ], "fixAvailable": true }, "@storybook/csf-tools": { "name": "@storybook/csf-tools", "severity": "high", "isDirect": false, "via": [ "@mdx-js/mdx", "global" ], "effects": [ "@storybook/codemod" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/codemod/node_modules/@storybook/csf-tools", "node_modules/@storybook/csf-tools" ], "fixAvailable": true }, "@storybook/docs-tools": { "name": "@storybook/docs-tools", "severity": "low", "isDirect": false, "via": [ "@storybook/store" ], "effects": [ "@storybook/addon-docs" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/docs-tools" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/manager-webpack4": { "name": "@storybook/manager-webpack4", "severity": "high", "isDirect": false, "via": [ "@storybook/addons", "@storybook/core-client", "@storybook/core-common", "@storybook/theming", "@storybook/ui", "css-loader", "telejson", "webpack", "webpack-dev-middleware" ], "effects": [ "@storybook/core-server" ], "range": "*", "nodes": [ "node_modules/@storybook/manager-webpack4" ], "fixAvailable": true }, "@storybook/mdx1-csf": { "name": "@storybook/mdx1-csf", "severity": "high", "isDirect": false, "via": [ "@mdx-js/mdx" ], "effects": [ "@storybook/addon-docs" ], "range": "*", "nodes": [ "node_modules/@storybook/mdx1-csf" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/preview-web": { "name": "@storybook/preview-web", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/channel-postmessage", "@storybook/client-logger", "@storybook/store", "global" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/@storybook/preview-web", "node_modules/@storybook/core-client/node_modules/@storybook/preview-web", "node_modules/@storybook/preview-web" ], "fixAvailable": true }, "@storybook/router": { "name": "@storybook/router", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "global" ], "effects": [ "@storybook/addons", "@storybook/api" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/router", "node_modules/@storybook/addon-actions/node_modules/@storybook/router", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/router", "node_modules/@storybook/addon-controls/node_modules/@storybook/router", "node_modules/@storybook/addon-docs/node_modules/@storybook/router", "node_modules/@storybook/addon-viewport/node_modules/@storybook/router", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/router", "node_modules/@storybook/core-client/node_modules/@storybook/router", "node_modules/@storybook/core-server/node_modules/@storybook/router", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/router", "node_modules/@storybook/preview-web/node_modules/@storybook/router", "node_modules/@storybook/router", "node_modules/@storybook/source-loader/node_modules/@storybook/router", "node_modules/@storybook/store/node_modules/@storybook/router", "node_modules/@storybook/ui/node_modules/@storybook/router", "node_modules/@storybook/vue/node_modules/@storybook/addons/node_modules/@storybook/router" ], "fixAvailable": { "name": "@storybook/addon-actions", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/source-loader": { "name": "@storybook/source-loader", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/client-logger", "global" ], "effects": [ "@storybook/addon-storysource" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-storysource/node_modules/@storybook/source-loader", "node_modules/@storybook/source-loader" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "@storybook/store": { "name": "@storybook/store", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/client-logger", "global" ], "effects": [ "@storybook/addon-controls", "@storybook/addon-docs", "@storybook/builder-webpack4", "@storybook/client-api", "@storybook/core-client", "@storybook/core-server", "@storybook/docs-tools", "@storybook/vue" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/@storybook/store", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/store", "node_modules/@storybook/core-client/node_modules/@storybook/store", "node_modules/@storybook/core-server/node_modules/@storybook/store", "node_modules/@storybook/store", "node_modules/@storybook/vue/node_modules/@storybook/store" ], "fixAvailable": { "name": "@storybook/addon-controls", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/theming": { "name": "@storybook/theming", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "global" ], "effects": [ "@storybook/addon-a11y", "@storybook/addon-actions", "@storybook/addon-docs", "@storybook/addon-storysource", "@storybook/addons", "@storybook/api", "@storybook/builder-webpack4", "@storybook/components", "@storybook/manager-webpack4", "@storybook/ui" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/theming", "node_modules/@storybook/addon-actions/node_modules/@storybook/theming", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/theming", "node_modules/@storybook/addon-controls/node_modules/@storybook/theming", "node_modules/@storybook/addon-docs/node_modules/@storybook/theming", "node_modules/@storybook/addon-viewport/node_modules/@storybook/theming", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/theming", "node_modules/@storybook/core-client/node_modules/@storybook/theming", "node_modules/@storybook/core-server/node_modules/@storybook/theming", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/theming", "node_modules/@storybook/preview-web/node_modules/@storybook/theming", "node_modules/@storybook/source-loader/node_modules/@storybook/theming", "node_modules/@storybook/store/node_modules/@storybook/theming", "node_modules/@storybook/theming", "node_modules/@storybook/ui/node_modules/@storybook/theming", "node_modules/@storybook/vue/node_modules/@storybook/addons/node_modules/@storybook/theming" ], "fixAvailable": { "name": "@storybook/addon-backgrounds", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/ui": { "name": "@storybook/ui", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/router", "@storybook/theming", "global" ], "effects": [ "@storybook/core-client" ], "range": "3.1.0 - 7.0.0-alpha.10", "nodes": [ "node_modules/@storybook/ui" ], "fixAvailable": true }, "@storybook/vue": { "name": "@storybook/vue", "severity": "high", "isDirect": true, "via": [ "@storybook/addons", "@storybook/core", "@storybook/core-common", "@storybook/store", "global", "vue", "vue-docgen-loader", "vue-loader", "vue-template-compiler", "webpack" ], "effects": [], "range": "*", "nodes": [ "node_modules/@storybook/vue" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "@vue/component-compiler-utils": { "name": "@vue/component-compiler-utils", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ "vue-loader" ], "range": "*", "nodes": [ "node_modules/@vue/component-compiler-utils" ], "fixAvailable": { "name": "vue-loader", "version": "17.4.2", "isSemVerMajor": true } }, "@wdio/cli": { "name": "@wdio/cli", "severity": "high", "isDirect": true, "via": [ "inquirer", "webdriverio", "yarn-install" ], "effects": [ "@wdio/junit-reporter", "@wdio/local-runner", "@wdio/spec-reporter" ], "range": "<=9.0.0-alpha.426", "nodes": [ "node_modules/@wdio/cli" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "@wdio/junit-reporter": { "name": "@wdio/junit-reporter", "severity": "high", "isDirect": true, "via": [ "@wdio/cli" ], "effects": [], "range": "6.0.4 - 8.0.0-alpha.631", "nodes": [ "node_modules/@wdio/junit-reporter" ], "fixAvailable": { "name": "@wdio/junit-reporter", "version": "9.20.0", "isSemVerMajor": true } }, "@wdio/local-runner": { "name": "@wdio/local-runner", "severity": "high", "isDirect": true, "via": [ "@wdio/cli", "@wdio/runner" ], "effects": [], "range": "6.0.4 - 8.46.0", "nodes": [ "node_modules/@wdio/local-runner" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.20.0", "isSemVerMajor": true } }, "@wdio/runner": { "name": "@wdio/runner", "severity": "high", "isDirect": false, "via": [ "webdriverio" ], "effects": [ "@wdio/local-runner" ], "range": "7.16.5 - 8.46.0", "nodes": [ "node_modules/@wdio/runner" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.20.0", "isSemVerMajor": true } }, "@wdio/spec-reporter": { "name": "@wdio/spec-reporter", "severity": "high", "isDirect": true, "via": [ "@wdio/cli" ], "effects": [], "range": "6.0.4 - 8.0.0-alpha.631", "nodes": [ "node_modules/@wdio/spec-reporter" ], "fixAvailable": { "name": "@wdio/spec-reporter", "version": "9.20.0", "isSemVerMajor": true } }, "@wikimedia/wvui": { "name": "@wikimedia/wvui", "severity": "low", "isDirect": true, "via": [ "vue" ], "effects": [], "range": "*", "nodes": [ "node_modules/@wikimedia/wvui" ], "fixAvailable": false }, "anymatch": { "name": "anymatch", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [ "chokidar", "sane" ], "range": "1.2.0 - 2.0.0", "nodes": [ "node_modules/sane/node_modules/anymatch", "node_modules/watchpack-chokidar2/node_modules/anymatch" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "autoprefixer": { "name": "autoprefixer", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [], "range": "1.0.20131222 - 9.8.8", "nodes": [ "node_modules/autoprefixer" ], "fixAvailable": true }, "braces": { "name": "braces", "severity": "high", "isDirect": false, "via": [ { "source": 1098094, "name": "braces", "dependency": "braces", "title": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "severity": "high", "cwe": [ "CWE-400", "CWE-1050" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<3.0.3" } ], "effects": [ "chokidar", "micromatch" ], "range": "<3.0.3", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/braces", "node_modules/@storybook/builder-webpack4/node_modules/braces", "node_modules/@storybook/codemod/node_modules/braces", "node_modules/@storybook/core-common/node_modules/braces", "node_modules/@storybook/core-server/node_modules/braces", "node_modules/@storybook/manager-webpack4/node_modules/braces", "node_modules/@storybook/vue/node_modules/braces", "node_modules/cpy/node_modules/braces", "node_modules/jscodeshift/node_modules/braces", "node_modules/sane/node_modules/braces", "node_modules/vue-docgen-loader/node_modules/braces", "node_modules/watchpack-chokidar2/node_modules/braces" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "chokidar": { "name": "chokidar", "severity": "high", "isDirect": false, "via": [ "anymatch", "braces", "readdirp" ], "effects": [ "watchpack-chokidar2" ], "range": "1.3.0 - 2.1.8", "nodes": [ "node_modules/watchpack-chokidar2/node_modules/chokidar" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "cpy": { "name": "cpy", "severity": "moderate", "isDirect": false, "via": [ "globby" ], "effects": [], "range": "7.0.0 - 8.1.2", "nodes": [ "node_modules/cpy" ], "fixAvailable": true }, "cross-spawn": { "name": "cross-spawn", "severity": "high", "isDirect": false, "via": [ { "source": 1104663, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": [ "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<6.0.6" } ], "effects": [ "yarn-install" ], "range": "<6.0.6", "nodes": [ "node_modules/yarn-install/node_modules/cross-spawn" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "css-loader": { "name": "css-loader", "severity": "moderate", "isDirect": false, "via": [ "icss-utils", "postcss", "postcss-modules-extract-imports", "postcss-modules-local-by-default", "postcss-modules-scope", "postcss-modules-values" ], "effects": [], "range": "0.15.0 - 4.3.0", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/css-loader", "node_modules/@storybook/manager-webpack4/node_modules/css-loader" ], "fixAvailable": true }, "devtools": { "name": "devtools", "severity": "high", "isDirect": false, "via": [ "puppeteer-core" ], "effects": [], "range": ">=7.16.5", "nodes": [ "node_modules/devtools" ], "fixAvailable": true }, "external-editor": { "name": "external-editor", "severity": "low", "isDirect": false, "via": [ "tmp" ], "effects": [ "inquirer" ], "range": ">=1.1.1", "nodes": [ "node_modules/external-editor" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "fast-glob": { "name": "fast-glob", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [ "globby" ], "range": "<=2.2.7", "nodes": [ "node_modules/cpy/node_modules/fast-glob" ], "fixAvailable": true }, "fork-ts-checker-webpack-plugin": { "name": "fork-ts-checker-webpack-plugin", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [], "range": "0.4.14 - 4.1.6", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/fork-ts-checker-webpack-plugin" ], "fixAvailable": true }, "form-data": { "name": "form-data", "severity": "critical", "isDirect": false, "via": [ { "source": 1106509, "name": "form-data", "dependency": "form-data", "title": "form-data uses unsafe random function in form-data for choosing boundary", "url": "https://github.com/advisories/GHSA-fjxv-7rqg-78g4", "severity": "critical", "cwe": [ "CWE-330" ], "cvss": { "score": 0, "vectorString": null }, "range": "<2.5.4" } ], "effects": [ "request" ], "range": "<2.5.4", "nodes": [ "node_modules/request/node_modules/form-data" ], "fixAvailable": false }, "global": { "name": "global", "severity": "low", "isDirect": false, "via": [ "min-document" ], "effects": [ "@storybook/addon-a11y", "@storybook/addon-actions", "@storybook/addon-backgrounds", "@storybook/addon-docs", "@storybook/addon-viewport", "@storybook/addons", "@storybook/api", "@storybook/channel-postmessage", "@storybook/channel-websocket", "@storybook/client-api", "@storybook/client-logger", "@storybook/components", "@storybook/core-client", "@storybook/csf-tools", "@storybook/preview-web", "@storybook/router", "@storybook/source-loader", "@storybook/store", "@storybook/theming", "@storybook/ui", "@storybook/vue", "telejson" ], "range": ">=2.0.3", "nodes": [ "node_modules/global" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "globby": { "name": "globby", "severity": "moderate", "isDirect": false, "via": [ "fast-glob" ], "effects": [ "cpy" ], "range": "8.0.0 - 9.2.0", "nodes": [ "node_modules/cpy/node_modules/globby" ], "fixAvailable": true }, "got": { "name": "got", "severity": "moderate", "isDirect": false, "via": [ { "source": 1088948, "name": "got", "dependency": "got", "title": "Got allows a redirect to a UNIX socket", "url": "https://github.com/advisories/GHSA-pfrx-2q88-qq97", "severity": "moderate", "cwe": [], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, "range": "<11.8.5" } ], "effects": [ "package-json" ], "range": "<11.8.5", "nodes": [ "node_modules/got" ], "fixAvailable": true }, "icss-utils": { "name": "icss-utils", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ "css-loader", "postcss-modules-local-by-default", "postcss-modules-values" ], "range": "<=4.1.1", "nodes": [ "node_modules/icss-utils" ], "fixAvailable": true }, "inquirer": { "name": "inquirer", "severity": "low", "isDirect": false, "via": [ "external-editor" ], "effects": [ "@wdio/cli" ], "range": "3.0.0 - 8.2.6 || 9.0.0 - 9.3.7", "nodes": [ "node_modules/inquirer" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "ip": { "name": "ip", "severity": "high", "isDirect": false, "via": [ { "source": 1101851, "name": "ip", "dependency": "ip", "title": "ip SSRF improper categorization in isPublic", "url": "https://github.com/advisories/GHSA-2p57-rm9w-gvfp", "severity": "high", "cwe": [ "CWE-918" ], "cvss": { "score": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "range": "<=2.0.1" } ], "effects": [ "@storybook/core-server" ], "range": "*", "nodes": [ "node_modules/ip" ], "fixAvailable": true }, "jest-haste-map": { "name": "jest-haste-map", "severity": "moderate", "isDirect": false, "via": [ "sane" ], "effects": [ "@jest/transform" ], "range": "24.0.0-alpha.0 - 26.6.2", "nodes": [ "node_modules/jest-haste-map" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "jscodeshift": { "name": "jscodeshift", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [ "@storybook/cli", "@storybook/codemod", "vue-docgen-loader" ], "range": "0.3.20 - 0.13.1", "nodes": [ "node_modules/@storybook/codemod/node_modules/jscodeshift", "node_modules/jscodeshift", "node_modules/vue-docgen-loader/node_modules/jscodeshift" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "jsdoc": { "name": "jsdoc", "severity": "high", "isDirect": true, "via": [ "taffydb" ], "effects": [], "range": "3.2.0-dev - 3.6.11", "nodes": [ "node_modules/jsdoc" ], "fixAvailable": { "name": "jsdoc", "version": "4.0.4", "isSemVerMajor": true } }, "jsdoc-wmf-theme": { "name": "jsdoc-wmf-theme", "severity": "high", "isDirect": true, "via": [ "taffydb" ], "effects": [], "range": "<=0.0.12", "nodes": [ "node_modules/jsdoc-wmf-theme" ], "fixAvailable": { "name": "jsdoc-wmf-theme", "version": "1.1.0", "isSemVerMajor": true } }, "latest-version": { "name": "latest-version", "severity": "moderate", "isDirect": false, "via": [ "package-json" ], "effects": [ "update-notifier" ], "range": "0.2.0 - 5.1.0", "nodes": [ "node_modules/latest-version" ], "fixAvailable": true }, "micromatch": { "name": "micromatch", "severity": "high", "isDirect": false, "via": [ { "source": 1098681, "name": "micromatch", "dependency": "micromatch", "title": "Regular Expression Denial of Service (ReDoS) in micromatch", "url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<4.0.8" }, "braces" ], "effects": [ "anymatch", "fast-glob", "fork-ts-checker-webpack-plugin", "jscodeshift", "readdirp", "sane", "webpack" ], "range": "<=4.0.7", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/micromatch", "node_modules/@storybook/builder-webpack4/node_modules/micromatch", "node_modules/@storybook/codemod/node_modules/micromatch", "node_modules/@storybook/core-common/node_modules/micromatch", "node_modules/@storybook/core-server/node_modules/micromatch", "node_modules/@storybook/manager-webpack4/node_modules/micromatch", "node_modules/@storybook/vue/node_modules/micromatch", "node_modules/cpy/node_modules/micromatch", "node_modules/jscodeshift/node_modules/micromatch", "node_modules/sane/node_modules/micromatch", "node_modules/vue-docgen-loader/node_modules/micromatch", "node_modules/watchpack-chokidar2/node_modules/micromatch" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "min-document": { "name": "min-document", "severity": "low", "isDirect": false, "via": [ { "source": 1108264, "name": "min-document", "dependency": "min-document", "title": "min-document vulnerable to prototype pollution", "url": "https://github.com/advisories/GHSA-rx8g-88g5-qh64", "severity": "low", "cwe": [ "CWE-1321" ], "cvss": { "score": 0, "vectorString": null }, "range": "<=2.19.0" } ], "effects": [ "global" ], "range": "*", "nodes": [ "node_modules/min-document" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "mwbot": { "name": "mwbot", "severity": "moderate", "isDirect": false, "via": [ "request" ], "effects": [ "wdio-mediawiki" ], "range": ">=0.1.6", "nodes": [ "node_modules/mwbot" ], "fixAvailable": false }, "package-json": { "name": "package-json", "severity": "moderate", "isDirect": false, "via": [ "got" ], "effects": [ "latest-version" ], "range": "<=6.5.0", "nodes": [ "node_modules/package-json" ], "fixAvailable": true }, "postcss": { "name": "postcss", "severity": "moderate", "isDirect": false, "via": [ { "source": 1094544, "name": "postcss", "dependency": "postcss", "title": "PostCSS line return parsing error", "url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "severity": "moderate", "cwe": [ "CWE-74", "CWE-144" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, "range": "<8.4.31" } ], "effects": [ "@storybook/builder-webpack4", "@vue/component-compiler-utils", "autoprefixer", "css-loader", "icss-utils", "postcss-flexbugs-fixes", "postcss-modules-extract-imports", "postcss-modules-local-by-default", "postcss-modules-scope", "postcss-modules-values" ], "range": "<8.4.31", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/postcss", "node_modules/@storybook/manager-webpack4/node_modules/postcss", "node_modules/@vue/component-compiler-utils/node_modules/postcss", "node_modules/autoprefixer/node_modules/postcss", "node_modules/icss-utils/node_modules/postcss", "node_modules/postcss-flexbugs-fixes/node_modules/postcss", "node_modules/postcss-modules-extract-imports/node_modules/postcss", "node_modules/postcss-modules-local-by-default/node_modules/postcss", "node_modules/postcss-modules-scope/node_modules/postcss", "node_modules/postcss-modules-values/node_modules/postcss" ], "fixAvailable": { "name": "vue-loader", "version": "17.4.2", "isSemVerMajor": true } }, "postcss-flexbugs-fixes": { "name": "postcss-flexbugs-fixes", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [], "range": "<=4.2.1", "nodes": [ "node_modules/postcss-flexbugs-fixes" ], "fixAvailable": true }, "postcss-modules-extract-imports": { "name": "postcss-modules-extract-imports", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [], "range": "<=2.0.0", "nodes": [ "node_modules/postcss-modules-extract-imports" ], "fixAvailable": true }, "postcss-modules-local-by-default": { "name": "postcss-modules-local-by-default", "severity": "moderate", "isDirect": false, "via": [ "icss-utils", "postcss" ], "effects": [], "range": "<=4.0.0-rc.4", "nodes": [ "node_modules/postcss-modules-local-by-default" ], "fixAvailable": true }, "postcss-modules-scope": { "name": "postcss-modules-scope", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [], "range": "<=2.2.0", "nodes": [ "node_modules/postcss-modules-scope" ], "fixAvailable": true }, "postcss-modules-values": { "name": "postcss-modules-values", "severity": "moderate", "isDirect": false, "via": [ "icss-utils", "postcss" ], "effects": [ "css-loader" ], "range": "<=4.0.0-rc.5", "nodes": [ "node_modules/postcss-modules-values" ], "fixAvailable": true }, "prismjs": { "name": "prismjs", "severity": "moderate", "isDirect": false, "via": [ { "source": 1105770, "name": "prismjs", "dependency": "prismjs", "title": "PrismJS DOM Clobbering vulnerability", "url": "https://github.com/advisories/GHSA-x7hr-w5r2-h6wg", "severity": "moderate", "cwe": [ "CWE-79", "CWE-94" ], "cvss": { "score": 4.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, "range": "<1.30.0" } ], "effects": [ "refractor" ], "range": "<1.30.0", "nodes": [ "node_modules/refractor/node_modules/prismjs" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "puppeteer-core": { "name": "puppeteer-core", "severity": "high", "isDirect": false, "via": [ "tar-fs", "ws" ], "effects": [ "devtools", "webdriverio" ], "range": "10.0.0 - 22.11.1", "nodes": [ "node_modules/devtools/node_modules/puppeteer-core", "node_modules/webdriverio/node_modules/puppeteer-core" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "react-syntax-highlighter": { "name": "react-syntax-highlighter", "severity": "moderate", "isDirect": false, "via": [ "refractor" ], "effects": [ "@storybook/addon-storysource", "@storybook/components" ], "range": ">=6.0.0", "nodes": [ "node_modules/@storybook/addon-docs/node_modules/react-syntax-highlighter", "node_modules/react-syntax-highlighter" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "readdirp": { "name": "readdirp", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [ "chokidar" ], "range": "2.2.0 - 2.2.1", "nodes": [ "node_modules/watchpack-chokidar2/node_modules/readdirp" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "refractor": { "name": "refractor", "severity": "moderate", "isDirect": false, "via": [ "prismjs" ], "effects": [ "react-syntax-highlighter" ], "range": "<=4.6.0", "nodes": [ "node_modules/refractor" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "remark-mdx": { "name": "remark-mdx", "severity": "high", "isDirect": false, "via": [ "remark-parse" ], "effects": [ "@mdx-js/mdx" ], "range": "<=1.6.22", "nodes": [ "node_modules/remark-mdx" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "remark-parse": { "name": "remark-parse", "severity": "high", "isDirect": false, "via": [ "trim" ], "effects": [ "@mdx-js/mdx", "remark-mdx" ], "range": "<=8.0.3", "nodes": [ "node_modules/remark-parse" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "request": { "name": "request", "severity": "critical", "isDirect": false, "via": [ { "source": 1096727, "name": "request", "dependency": "request", "title": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "severity": "moderate", "cwe": [ "CWE-918" ], "cvss": { "score": 6.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, "range": "<=2.88.2" }, "form-data", "tough-cookie" ], "effects": [ "mwbot" ], "range": "*", "nodes": [ "node_modules/request" ], "fixAvailable": false }, "sane": { "name": "sane", "severity": "moderate", "isDirect": false, "via": [ "anymatch", "micromatch" ], "effects": [ "jest-haste-map" ], "range": "1.5.0 - 4.1.0", "nodes": [ "node_modules/sane" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "storybook": { "name": "storybook", "severity": "moderate", "isDirect": true, "via": [ "@storybook/cli" ], "effects": [], "range": "5.3.0 - 7.0.0-rc.11", "nodes": [ "node_modules/storybook" ], "fixAvailable": { "name": "storybook", "version": "9.1.10", "isSemVerMajor": true } }, "taffydb": { "name": "taffydb", "severity": "high", "isDirect": false, "via": [ { "source": 1089386, "name": "taffydb", "dependency": "taffydb", "title": "TaffyDB can allow access to any data items in the DB", "url": "https://github.com/advisories/GHSA-mxhp-79qh-mcx6", "severity": "high", "cwe": [ "CWE-20", "CWE-668" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "range": "<=2.7.3" } ], "effects": [ "jsdoc", "jsdoc-wmf-theme" ], "range": "*", "nodes": [ "node_modules/taffydb" ], "fixAvailable": { "name": "jsdoc", "version": "4.0.4", "isSemVerMajor": true } }, "tar-fs": { "name": "tar-fs", "severity": "high", "isDirect": false, "via": [ { "source": 1106930, "name": "tar-fs", "dependency": "tar-fs", "title": "tar-fs can extract outside the specified dir with a specific tarball", "url": "https://github.com/advisories/GHSA-8cj5-5rvv-wf4v", "severity": "high", "cwe": [ "CWE-22" ], "cvss": { "score": 0, "vectorString": null }, "range": ">=2.0.0 <2.1.3" }, { "source": 1108293, "name": "tar-fs", "dependency": "tar-fs", "title": "tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball", "url": "https://github.com/advisories/GHSA-vj76-c3g6-qr5v", "severity": "high", "cwe": [ "CWE-22", "CWE-61" ], "cvss": { "score": 0, "vectorString": null }, "range": ">=2.0.0 <2.1.4" }, { "source": 1108411, "name": "tar-fs", "dependency": "tar-fs", "title": "tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File", "url": "https://github.com/advisories/GHSA-pq67-2wwv-3xjx", "severity": "high", "cwe": [ "CWE-22" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, "range": ">=2.0.0 <2.1.2" } ], "effects": [ "puppeteer-core" ], "range": "2.0.0 - 2.1.3", "nodes": [ "node_modules/tar-fs" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "telejson": { "name": "telejson", "severity": "low", "isDirect": false, "via": [ "global" ], "effects": [ "@storybook/addon-actions", "@storybook/channel-postmessage", "@storybook/channel-websocket", "@storybook/core-common", "@storybook/core-server" ], "range": "<=6.0.8", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/telejson", "node_modules/@storybook/addon-actions/node_modules/telejson", "node_modules/@storybook/addon-backgrounds/node_modules/telejson", "node_modules/@storybook/addon-controls/node_modules/telejson", "node_modules/@storybook/addon-docs/node_modules/telejson", "node_modules/@storybook/addon-viewport/node_modules/telejson", "node_modules/@storybook/core-common/node_modules/telejson", "node_modules/@storybook/preview-web/node_modules/telejson", "node_modules/@storybook/source-loader/node_modules/telejson", "node_modules/@storybook/store/node_modules/telejson", "node_modules/telejson" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "terser-webpack-plugin": { "name": "terser-webpack-plugin", "severity": "moderate", "isDirect": false, "via": [ "webpack" ], "effects": [ "webpack" ], "range": "<=2.2.1", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/terser-webpack-plugin", "node_modules/@storybook/builder-webpack4/node_modules/webpack/node_modules/terser-webpack-plugin", "node_modules/@storybook/core-common/node_modules/terser-webpack-plugin", "node_modules/@storybook/core-server/node_modules/terser-webpack-plugin", "node_modules/@storybook/manager-webpack4/node_modules/webpack/node_modules/terser-webpack-plugin", "node_modules/@storybook/vue/node_modules/terser-webpack-plugin" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "tmp": { "name": "tmp", "severity": "low", "isDirect": false, "via": [ { "source": 1106849, "name": "tmp", "dependency": "tmp", "title": "tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter", "url": "https://github.com/advisories/GHSA-52f5-9888-hmc6", "severity": "low", "cwe": [ "CWE-59" ], "cvss": { "score": 2.5, "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" }, "range": "<=0.2.3" } ], "effects": [ "external-editor" ], "range": "<=0.2.3", "nodes": [ "node_modules/tmp" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "tough-cookie": { "name": "tough-cookie", "severity": "moderate", "isDirect": false, "via": [ { "source": 1097682, "name": "tough-cookie", "dependency": "tough-cookie", "title": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "severity": "moderate", "cwe": [ "CWE-1321" ], "cvss": { "score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, "range": "<4.1.3" } ], "effects": [ "request" ], "range": "<4.1.3", "nodes": [ "node_modules/tough-cookie" ], "fixAvailable": false }, "trim": { "name": "trim", "severity": "high", "isDirect": false, "via": [ { "source": 1089867, "name": "trim", "dependency": "trim", "title": "Regular Expression Denial of Service in trim", "url": "https://github.com/advisories/GHSA-w5p7-h5w8-2hfq", "severity": "high", "cwe": [ "CWE-400" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<0.0.3" } ], "effects": [ "remark-parse" ], "range": "<0.0.3", "nodes": [ "node_modules/trim" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "update-notifier": { "name": "update-notifier", "severity": "moderate", "isDirect": false, "via": [ "latest-version" ], "effects": [], "range": "0.2.0 - 5.1.0", "nodes": [ "node_modules/update-notifier" ], "fixAvailable": true }, "vue": { "name": "vue", "severity": "low", "isDirect": true, "via": [ { "source": 1100238, "name": "vue", "dependency": "vue", "title": "ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function", "url": "https://github.com/advisories/GHSA-5j4c-8p2g-v4jx", "severity": "low", "cwe": [ "CWE-1333" ], "cvss": { "score": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": ">=2.0.0-alpha.1 <3.0.0-alpha.0" } ], "effects": [ "@storybook/vue", "@wikimedia/wvui" ], "range": "2.0.0-alpha.1 - 2.7.16", "nodes": [ "node_modules/vue" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "vue-docgen-loader": { "name": "vue-docgen-loader", "severity": "moderate", "isDirect": false, "via": [ "jscodeshift" ], "effects": [ "@storybook/vue" ], "range": "1.3.0-beta.0 - 2.0.0", "nodes": [ "node_modules/vue-docgen-loader" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "vue-loader": { "name": "vue-loader", "severity": "moderate", "isDirect": true, "via": [ "@vue/component-compiler-utils" ], "effects": [ "@storybook/vue" ], "range": "15.0.0-beta.1 - 15.11.1", "nodes": [ "node_modules/vue-loader" ], "fixAvailable": { "name": "vue-loader", "version": "17.4.2", "isSemVerMajor": true } }, "vue-template-compiler": { "name": "vue-template-compiler", "severity": "moderate", "isDirect": true, "via": [ { "source": 1098721, "name": "vue-template-compiler", "dependency": "vue-template-compiler", "title": "vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)", "url": "https://github.com/advisories/GHSA-g3ch-rx76-35fx", "severity": "moderate", "cwe": [ "CWE-79" ], "cvss": { "score": 4.2, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" }, "range": ">=2.0.0 <3.0.0" } ], "effects": [ "@storybook/vue" ], "range": ">=2.0.0", "nodes": [ "node_modules/vue-template-compiler" ], "fixAvailable": { "name": "vue-template-compiler", "version": "0.1.0", "isSemVerMajor": true } }, "watchpack": { "name": "watchpack", "severity": "high", "isDirect": false, "via": [ "watchpack-chokidar2" ], "effects": [ "webpack" ], "range": "1.7.2 - 1.7.5", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/watchpack", "node_modules/@storybook/builder-webpack4/node_modules/watchpack", "node_modules/@storybook/core-common/node_modules/watchpack", "node_modules/@storybook/core-server/node_modules/webpack/node_modules/watchpack", "node_modules/@storybook/manager-webpack4/node_modules/watchpack", "node_modules/@storybook/vue/node_modules/watchpack" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "watchpack-chokidar2": { "name": "watchpack-chokidar2", "severity": "high", "isDirect": false, "via": [ "chokidar" ], "effects": [ "watchpack" ], "range": "*", "nodes": [ "node_modules/watchpack-chokidar2" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "wdio-mediawiki": { "name": "wdio-mediawiki", "severity": "moderate", "isDirect": true, "via": [ "mwbot" ], "effects": [], "range": "*", "nodes": [ "node_modules/wdio-mediawiki" ], "fixAvailable": false }, "webdriverio": { "name": "webdriverio", "severity": "high", "isDirect": false, "via": [ "devtools", "puppeteer-core" ], "effects": [ "@wdio/cli", "@wdio/runner" ], "range": "7.16.5 - 8.46.0", "nodes": [ "node_modules/webdriverio" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "webpack": { "name": "webpack", "severity": "high", "isDirect": false, "via": [ "micromatch", "terser-webpack-plugin", "watchpack" ], "effects": [ "@storybook/core-common", "@storybook/core-server", "@storybook/vue", "terser-webpack-plugin" ], "range": "4.0.0-alpha.0 - 5.0.0-rc.6", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/webpack", "node_modules/@storybook/builder-webpack4/node_modules/webpack", "node_modules/@storybook/core-common/node_modules/webpack", "node_modules/@storybook/core-server/node_modules/webpack", "node_modules/@storybook/manager-webpack4/node_modules/webpack", "node_modules/@storybook/vue/node_modules/webpack" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "webpack-dev-middleware": { "name": "webpack-dev-middleware", "severity": "high", "isDirect": false, "via": [ { "source": 1096729, "name": "webpack-dev-middleware", "dependency": "webpack-dev-middleware", "title": "Path traversal in webpack-dev-middleware", "url": "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "severity": "high", "cwe": [ "CWE-22" ], "cvss": { "score": 7.4, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" }, "range": "<=5.3.3" } ], "effects": [ "@storybook/manager-webpack4" ], "range": "<=5.3.3", "nodes": [ "node_modules/webpack-dev-middleware" ], "fixAvailable": true }, "ws": { "name": "ws", "severity": "high", "isDirect": false, "via": [ { "source": 1098392, "name": "ws", "dependency": "ws", "title": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "severity": "high", "cwe": [ "CWE-476" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": ">=8.0.0 <8.17.1" } ], "effects": [ "puppeteer-core" ], "range": "8.0.0 - 8.17.0", "nodes": [ "node_modules/devtools/node_modules/ws", "node_modules/webdriverio/node_modules/ws" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "yarn-install": { "name": "yarn-install", "severity": "high", "isDirect": false, "via": [ "cross-spawn" ], "effects": [ "@wdio/cli" ], "range": "*", "nodes": [ "node_modules/yarn-install" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 26, "moderate": 40, "high": 36, "critical": 2, "total": 104 }, "dependencies": { "prod": 1, "dev": 3220, "optional": 41, "peer": 387, "peerOptional": 0, "total": 3220 } } } --- end --- $ /usr/bin/composer install --- stderr --- No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information. Loading composer repositories with package information Updating dependencies Lock file operations: 36 installs, 0 updates, 0 removals - Locking composer/pcre (1.0.1) - Locking composer/semver (3.3.2) - Locking composer/spdx-licenses (1.5.9) - Locking composer/xdebug-handler (2.0.5) - Locking doctrine/deprecations (1.1.5) - Locking felixfbecker/advanced-json-rpc (v3.2.1) - Locking mediawiki/mediawiki-codesniffer (v39.0.0) - Locking mediawiki/mediawiki-phan-config (0.11.1) - Locking mediawiki/minus-x (1.1.1) - Locking mediawiki/phan-taint-check-plugin (3.3.2) - Locking microsoft/tolerant-php-parser (v0.1.2) - Locking netresearch/jsonmapper (v4.5.0) - Locking phan/phan (5.2.0) - Locking php-parallel-lint/php-console-color (v1.0.1) - Locking php-parallel-lint/php-console-highlighter (v1.0.0) - Locking php-parallel-lint/php-parallel-lint (v1.3.2) - Locking phpdocumentor/reflection-common (2.2.0) - Locking phpdocumentor/reflection-docblock (5.6.3) - Locking phpdocumentor/type-resolver (1.10.0) - Locking phpstan/phpdoc-parser (2.3.0) - Locking psr/container (2.0.2) - Locking psr/log (2.0.0) - Locking sabre/event (5.1.7) - Locking squizlabs/php_codesniffer (3.6.2) - Locking symfony/console (v5.4.47) - Locking symfony/deprecation-contracts (v3.6.0) - Locking symfony/polyfill-ctype (v1.33.0) - Locking symfony/polyfill-intl-grapheme (v1.33.0) - Locking symfony/polyfill-intl-normalizer (v1.33.0) - Locking symfony/polyfill-mbstring (v1.33.0) - Locking symfony/polyfill-php73 (v1.33.0) - Locking symfony/polyfill-php80 (v1.33.0) - Locking symfony/service-contracts (v3.6.0) - Locking symfony/string (v6.4.26) - Locking tysonandre/var_representation_polyfill (0.1.3) - Locking webmozart/assert (1.11.0) Writing lock file Installing dependencies from lock file (including require-dev) Package operations: 36 installs, 0 updates, 0 removals 0 [>---------------------------] 0 [->--------------------------] - Installing composer/pcre (1.0.1): Extracting archive - Installing squizlabs/php_codesniffer (3.6.2): Extracting archive - Installing symfony/polyfill-mbstring (v1.33.0): Extracting archive - Installing composer/spdx-licenses (1.5.9): Extracting archive - Installing composer/semver (3.3.2): Extracting archive - Installing mediawiki/mediawiki-codesniffer (v39.0.0): Extracting archive - Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive - Installing symfony/polyfill-php80 (v1.33.0): Extracting archive - Installing symfony/polyfill-intl-normalizer (v1.33.0): Extracting archive - Installing symfony/polyfill-intl-grapheme (v1.33.0): Extracting archive - Installing symfony/polyfill-ctype (v1.33.0): Extracting archive - Installing symfony/string (v6.4.26): Extracting archive - Installing symfony/deprecation-contracts (v3.6.0): Extracting archive - Installing psr/container (2.0.2): Extracting archive - Installing symfony/service-contracts (v3.6.0): Extracting archive - Installing symfony/polyfill-php73 (v1.33.0): Extracting archive - Installing symfony/console (v5.4.47): Extracting archive - Installing sabre/event (5.1.7): Extracting archive - Installing netresearch/jsonmapper (v4.5.0): Extracting archive - Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive - Installing webmozart/assert (1.11.0): Extracting archive - Installing phpstan/phpdoc-parser (2.3.0): Extracting archive - Installing phpdocumentor/reflection-common (2.2.0): Extracting archive - Installing doctrine/deprecations (1.1.5): Extracting archive - Installing phpdocumentor/type-resolver (1.10.0): Extracting archive - Installing phpdocumentor/reflection-docblock (5.6.3): Extracting archive - Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive - Installing psr/log (2.0.0): Extracting archive - Installing composer/xdebug-handler (2.0.5): Extracting archive - Installing phan/phan (5.2.0): Extracting archive - Installing mediawiki/phan-taint-check-plugin (3.3.2): Extracting archive - Installing mediawiki/mediawiki-phan-config (0.11.1): Extracting archive - Installing mediawiki/minus-x (1.1.1): Extracting archive - Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive - Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive - Installing php-parallel-lint/php-parallel-lint (v1.3.2): Extracting archive 0/36 [>---------------------------] 0% 25/36 [===================>--------] 69% 35/36 [===========================>] 97% 36/36 [============================] 100% 3 package suggestions were added by new dependencies, use `composer suggest` to see details. Generating autoload files 15 packages you are using are looking for funding. Use the `composer fund` command to find out more! --- stdout --- --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "@jest/transform": { "name": "@jest/transform", "severity": "moderate", "isDirect": false, "via": [ "jest-haste-map" ], "effects": [ "@storybook/addon-docs" ], "range": "<=26.6.2", "nodes": [ "node_modules/@jest/transform" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@mdx-js/mdx": { "name": "@mdx-js/mdx", "severity": "high", "isDirect": false, "via": [ "remark-mdx", "remark-parse" ], "effects": [ "@storybook/codemod", "@storybook/csf-tools", "@storybook/mdx1-csf" ], "range": "<=1.6.22", "nodes": [ "node_modules/@mdx-js/mdx" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/addon-a11y": { "name": "@storybook/addon-a11y", "severity": "low", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/theming", "global" ], "effects": [], "range": "4.0.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y" ], "fixAvailable": { "name": "@storybook/addon-a11y", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/addon-actions": { "name": "@storybook/addon-actions", "severity": "low", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/theming", "global", "telejson" ], "effects": [], "range": "3.3.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-actions" ], "fixAvailable": { "name": "@storybook/addon-actions", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/addon-backgrounds": { "name": "@storybook/addon-backgrounds", "severity": "low", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/theming", "global" ], "effects": [], "range": "3.3.14 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-backgrounds" ], "fixAvailable": { "name": "@storybook/addon-backgrounds", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/addon-controls": { "name": "@storybook/addon-controls", "severity": "moderate", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/core-common", "@storybook/store", "@storybook/theming" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-controls" ], "fixAvailable": { "name": "@storybook/addon-controls", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/addon-docs": { "name": "@storybook/addon-docs", "severity": "high", "isDirect": true, "via": [ "@jest/transform", "@storybook/addons", "@storybook/api", "@storybook/components", "@storybook/core-common", "@storybook/docs-tools", "@storybook/mdx1-csf", "@storybook/preview-web", "@storybook/source-loader", "@storybook/store", "@storybook/theming", "global" ], "effects": [], "range": "<=7.0.3 || 7.1.0-alpha.0 - 7.1.0-rc.2", "nodes": [ "node_modules/@storybook/addon-docs" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/addon-storysource": { "name": "@storybook/addon-storysource", "severity": "moderate", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/router", "@storybook/source-loader", "@storybook/theming", "react-syntax-highlighter" ], "effects": [], "range": "<=7.6.0-beta.2", "nodes": [ "node_modules/@storybook/addon-storysource" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "@storybook/addon-viewport": { "name": "@storybook/addon-viewport", "severity": "low", "isDirect": true, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/theming", "global" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-viewport" ], "fixAvailable": { "name": "@storybook/addon-viewport", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/addons": { "name": "@storybook/addons", "severity": "low", "isDirect": false, "via": [ "@storybook/api", "@storybook/client-logger", "@storybook/router", "@storybook/router", "@storybook/theming", "@storybook/theming", "global" ], "effects": [ "@storybook/addon-actions", "@storybook/addon-backgrounds", "@storybook/addon-controls", "@storybook/addon-storysource", "@storybook/addon-viewport", "@storybook/ui", "@storybook/vue" ], "range": "4.0.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/addons", "node_modules/@storybook/addon-actions/node_modules/@storybook/addons", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/addons", "node_modules/@storybook/addon-controls/node_modules/@storybook/addons", "node_modules/@storybook/addon-docs/node_modules/@storybook/addons", "node_modules/@storybook/addon-viewport/node_modules/@storybook/addons", "node_modules/@storybook/addons", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/addons", "node_modules/@storybook/core-client/node_modules/@storybook/addons", "node_modules/@storybook/core-server/node_modules/@storybook/addons", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/addons", "node_modules/@storybook/preview-web/node_modules/@storybook/addons", "node_modules/@storybook/source-loader/node_modules/@storybook/addons", "node_modules/@storybook/store/node_modules/@storybook/addons", "node_modules/@storybook/ui/node_modules/@storybook/addons", "node_modules/@storybook/vue/node_modules/@storybook/addons" ], "fixAvailable": { "name": "@storybook/addon-actions", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/api": { "name": "@storybook/api", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "@storybook/router", "@storybook/router", "@storybook/theming", "@storybook/theming", "global", "telejson" ], "effects": [ "@storybook/addon-a11y", "@storybook/addon-actions", "@storybook/addon-backgrounds", "@storybook/addon-viewport", "@storybook/addons", "@storybook/ui" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/api", "node_modules/@storybook/addon-actions/node_modules/@storybook/api", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/api", "node_modules/@storybook/addon-controls/node_modules/@storybook/api", "node_modules/@storybook/addon-docs/node_modules/@storybook/api", "node_modules/@storybook/addon-viewport/node_modules/@storybook/api", "node_modules/@storybook/api", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/api", "node_modules/@storybook/core-client/node_modules/@storybook/api", "node_modules/@storybook/core-server/node_modules/@storybook/api", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/api", "node_modules/@storybook/preview-web/node_modules/@storybook/api", "node_modules/@storybook/source-loader/node_modules/@storybook/api", "node_modules/@storybook/store/node_modules/@storybook/api", "node_modules/@storybook/ui/node_modules/@storybook/api", "node_modules/@storybook/vue/node_modules/@storybook/addons/node_modules/@storybook/api" ], "fixAvailable": { "name": "@storybook/addon-actions", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/builder-webpack4": { "name": "@storybook/builder-webpack4", "severity": "high", "isDirect": false, "via": [ "@storybook/addons", "@storybook/api", "@storybook/channel-postmessage", "@storybook/client-api", "@storybook/client-logger", "@storybook/components", "@storybook/core-common", "@storybook/preview-web", "@storybook/router", "@storybook/store", "@storybook/theming", "@storybook/ui", "autoprefixer", "css-loader", "fork-ts-checker-webpack-plugin", "global", "postcss", "postcss-flexbugs-fixes", "webpack", "webpack-dev-middleware" ], "effects": [], "range": "*", "nodes": [ "node_modules/@storybook/builder-webpack4" ], "fixAvailable": true }, "@storybook/channel-postmessage": { "name": "@storybook/channel-postmessage", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "global", "telejson" ], "effects": [ "@storybook/client-api" ], "range": "3.1.2 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/@storybook/channel-postmessage", "node_modules/@storybook/core-client/node_modules/@storybook/channel-postmessage", "node_modules/@storybook/preview-web/node_modules/@storybook/channel-postmessage" ], "fixAvailable": true }, "@storybook/channel-websocket": { "name": "@storybook/channel-websocket", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "global", "telejson" ], "effects": [], "range": "3.1.2 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/channel-websocket" ], "fixAvailable": true }, "@storybook/cli": { "name": "@storybook/cli", "severity": "moderate", "isDirect": false, "via": [ "@storybook/codemod", "jscodeshift", "update-notifier" ], "effects": [ "storybook" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/cli" ], "fixAvailable": { "name": "storybook", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/client-api": { "name": "@storybook/client-api", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/channel-postmessage", "@storybook/client-logger", "@storybook/store", "global" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/@storybook/client-api", "node_modules/@storybook/core-client/node_modules/@storybook/client-api" ], "fixAvailable": true }, "@storybook/client-logger": { "name": "@storybook/client-logger", "severity": "low", "isDirect": false, "via": [ "global" ], "effects": [ "@storybook/addon-a11y", "@storybook/addon-actions", "@storybook/addon-backgrounds", "@storybook/addon-storysource", "@storybook/addon-viewport", "@storybook/addons", "@storybook/api", "@storybook/channel-postmessage", "@storybook/channel-websocket", "@storybook/client-api", "@storybook/components", "@storybook/router", "@storybook/source-loader", "@storybook/theming", "@storybook/ui" ], "range": "6.0.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-actions/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-controls/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-docs/node_modules/@storybook/client-logger", "node_modules/@storybook/addon-viewport/node_modules/@storybook/client-logger", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/client-logger", "node_modules/@storybook/channel-websocket/node_modules/@storybook/client-logger", "node_modules/@storybook/client-logger", "node_modules/@storybook/core-client/node_modules/@storybook/client-logger", "node_modules/@storybook/core-server/node_modules/@storybook/client-logger", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/client-logger", "node_modules/@storybook/preview-web/node_modules/@storybook/client-logger", "node_modules/@storybook/source-loader/node_modules/@storybook/client-logger", "node_modules/@storybook/store/node_modules/@storybook/client-logger", "node_modules/@storybook/ui/node_modules/@storybook/client-logger", "node_modules/@storybook/vue/node_modules/@storybook/client-logger" ], "fixAvailable": { "name": "@storybook/addon-a11y", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/codemod": { "name": "@storybook/codemod", "severity": "high", "isDirect": false, "via": [ "@mdx-js/mdx", "@storybook/csf-tools", "jscodeshift" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/codemod" ], "fixAvailable": true }, "@storybook/components": { "name": "@storybook/components", "severity": "moderate", "isDirect": false, "via": [ "@storybook/client-logger", "@storybook/theming", "@storybook/theming", "global", "react-syntax-highlighter" ], "effects": [ "@storybook/addon-a11y", "@storybook/addon-actions", "@storybook/addon-docs", "@storybook/addon-storysource", "@storybook/builder-webpack4", "@storybook/ui" ], "range": "4.0.0-alpha.0 - 7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/components", "node_modules/@storybook/addon-actions/node_modules/@storybook/components", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/components", "node_modules/@storybook/addon-controls/node_modules/@storybook/components", "node_modules/@storybook/addon-docs/node_modules/@storybook/components", "node_modules/@storybook/addon-viewport/node_modules/@storybook/components", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/components", "node_modules/@storybook/components", "node_modules/@storybook/ui/node_modules/@storybook/components" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "@storybook/core": { "name": "@storybook/core", "severity": "high", "isDirect": false, "via": [ "@storybook/core-client", "@storybook/core-server" ], "effects": [], "range": "6.2.0-alpha.0 - 6.5.17-alpha.0", "nodes": [ "node_modules/@storybook/core" ], "fixAvailable": true }, "@storybook/core-client": { "name": "@storybook/core-client", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/channel-postmessage", "@storybook/channel-websocket", "@storybook/client-api", "@storybook/client-logger", "@storybook/preview-web", "@storybook/store", "@storybook/ui", "global" ], "effects": [ "@storybook/core-server" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/core-client" ], "fixAvailable": true }, "@storybook/core-common": { "name": "@storybook/core-common", "severity": "moderate", "isDirect": false, "via": [ "telejson", "webpack" ], "effects": [ "@storybook/addon-controls", "@storybook/addon-docs", "@storybook/vue" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/@storybook/core-common", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/core-common", "node_modules/@storybook/core-common", "node_modules/@storybook/core-server/node_modules/@storybook/core-common", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/core-common", "node_modules/@storybook/vue/node_modules/@storybook/core-common" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/core-server": { "name": "@storybook/core-server", "severity": "high", "isDirect": false, "via": [ "@storybook/builder-webpack4", "@storybook/core-client", "@storybook/core-common", "@storybook/csf-tools", "@storybook/manager-webpack4", "@storybook/store", "cpy", "ip", "telejson", "webpack" ], "effects": [ "@storybook/core" ], "range": "<=7.6.19 || 8.0.0-alpha.0 - 8.1.5 || 8.2.0-alpha.0 - 8.2.0-beta.3", "nodes": [ "node_modules/@storybook/core-server" ], "fixAvailable": true }, "@storybook/csf-tools": { "name": "@storybook/csf-tools", "severity": "high", "isDirect": false, "via": [ "@mdx-js/mdx", "global" ], "effects": [ "@storybook/codemod" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/codemod/node_modules/@storybook/csf-tools", "node_modules/@storybook/csf-tools" ], "fixAvailable": true }, "@storybook/docs-tools": { "name": "@storybook/docs-tools", "severity": "low", "isDirect": false, "via": [ "@storybook/store" ], "effects": [ "@storybook/addon-docs" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/docs-tools" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/manager-webpack4": { "name": "@storybook/manager-webpack4", "severity": "high", "isDirect": false, "via": [ "@storybook/addons", "@storybook/core-client", "@storybook/core-common", "@storybook/theming", "@storybook/ui", "css-loader", "telejson", "webpack", "webpack-dev-middleware" ], "effects": [ "@storybook/core-server" ], "range": "*", "nodes": [ "node_modules/@storybook/manager-webpack4" ], "fixAvailable": true }, "@storybook/mdx1-csf": { "name": "@storybook/mdx1-csf", "severity": "high", "isDirect": false, "via": [ "@mdx-js/mdx" ], "effects": [ "@storybook/addon-docs" ], "range": "*", "nodes": [ "node_modules/@storybook/mdx1-csf" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "@storybook/preview-web": { "name": "@storybook/preview-web", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/channel-postmessage", "@storybook/client-logger", "@storybook/store", "global" ], "effects": [], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/@storybook/preview-web", "node_modules/@storybook/core-client/node_modules/@storybook/preview-web", "node_modules/@storybook/preview-web" ], "fixAvailable": true }, "@storybook/router": { "name": "@storybook/router", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "global" ], "effects": [ "@storybook/addons", "@storybook/api" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/router", "node_modules/@storybook/addon-actions/node_modules/@storybook/router", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/router", "node_modules/@storybook/addon-controls/node_modules/@storybook/router", "node_modules/@storybook/addon-docs/node_modules/@storybook/router", "node_modules/@storybook/addon-viewport/node_modules/@storybook/router", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/router", "node_modules/@storybook/core-client/node_modules/@storybook/router", "node_modules/@storybook/core-server/node_modules/@storybook/router", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/router", "node_modules/@storybook/preview-web/node_modules/@storybook/router", "node_modules/@storybook/router", "node_modules/@storybook/source-loader/node_modules/@storybook/router", "node_modules/@storybook/store/node_modules/@storybook/router", "node_modules/@storybook/ui/node_modules/@storybook/router", "node_modules/@storybook/vue/node_modules/@storybook/addons/node_modules/@storybook/router" ], "fixAvailable": { "name": "@storybook/addon-actions", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/source-loader": { "name": "@storybook/source-loader", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/client-logger", "global" ], "effects": [ "@storybook/addon-storysource" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-storysource/node_modules/@storybook/source-loader", "node_modules/@storybook/source-loader" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "@storybook/store": { "name": "@storybook/store", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/client-logger", "global" ], "effects": [ "@storybook/addon-controls", "@storybook/addon-docs", "@storybook/builder-webpack4", "@storybook/client-api", "@storybook/core-client", "@storybook/core-server", "@storybook/docs-tools", "@storybook/vue" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/@storybook/store", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/store", "node_modules/@storybook/core-client/node_modules/@storybook/store", "node_modules/@storybook/core-server/node_modules/@storybook/store", "node_modules/@storybook/store", "node_modules/@storybook/vue/node_modules/@storybook/store" ], "fixAvailable": { "name": "@storybook/addon-controls", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/theming": { "name": "@storybook/theming", "severity": "low", "isDirect": false, "via": [ "@storybook/client-logger", "global" ], "effects": [ "@storybook/addon-storysource", "@storybook/addons", "@storybook/api", "@storybook/components", "@storybook/manager-webpack4", "@storybook/ui" ], "range": "<=7.0.0-rc.11", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/@storybook/theming", "node_modules/@storybook/addon-actions/node_modules/@storybook/theming", "node_modules/@storybook/addon-backgrounds/node_modules/@storybook/theming", "node_modules/@storybook/addon-controls/node_modules/@storybook/theming", "node_modules/@storybook/addon-docs/node_modules/@storybook/theming", "node_modules/@storybook/addon-viewport/node_modules/@storybook/theming", "node_modules/@storybook/builder-webpack4/node_modules/@storybook/theming", "node_modules/@storybook/core-client/node_modules/@storybook/theming", "node_modules/@storybook/core-server/node_modules/@storybook/theming", "node_modules/@storybook/manager-webpack4/node_modules/@storybook/theming", "node_modules/@storybook/preview-web/node_modules/@storybook/theming", "node_modules/@storybook/source-loader/node_modules/@storybook/theming", "node_modules/@storybook/store/node_modules/@storybook/theming", "node_modules/@storybook/theming", "node_modules/@storybook/ui/node_modules/@storybook/theming", "node_modules/@storybook/vue/node_modules/@storybook/addons/node_modules/@storybook/theming" ], "fixAvailable": { "name": "@storybook/addon-actions", "version": "9.0.8", "isSemVerMajor": true } }, "@storybook/ui": { "name": "@storybook/ui", "severity": "low", "isDirect": false, "via": [ "@storybook/addons", "@storybook/api", "@storybook/client-logger", "@storybook/components", "@storybook/router", "@storybook/theming", "global" ], "effects": [ "@storybook/core-client" ], "range": "3.1.0 - 7.0.0-alpha.10", "nodes": [ "node_modules/@storybook/ui" ], "fixAvailable": true }, "@storybook/vue": { "name": "@storybook/vue", "severity": "high", "isDirect": true, "via": [ "@storybook/addons", "@storybook/core", "@storybook/core-common", "@storybook/store", "global", "vue", "vue-docgen-loader", "vue-loader", "vue-template-compiler", "webpack" ], "effects": [], "range": "*", "nodes": [ "node_modules/@storybook/vue" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "@vue/component-compiler-utils": { "name": "@vue/component-compiler-utils", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ "vue-loader" ], "range": "*", "nodes": [ "node_modules/@vue/component-compiler-utils" ], "fixAvailable": { "name": "vue-loader", "version": "17.4.2", "isSemVerMajor": true } }, "@wdio/cli": { "name": "@wdio/cli", "severity": "high", "isDirect": true, "via": [ "inquirer", "webdriverio", "yarn-install" ], "effects": [ "@wdio/junit-reporter", "@wdio/local-runner", "@wdio/spec-reporter" ], "range": "<=9.0.0-alpha.426", "nodes": [ "node_modules/@wdio/cli" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "@wdio/junit-reporter": { "name": "@wdio/junit-reporter", "severity": "high", "isDirect": true, "via": [ "@wdio/cli" ], "effects": [], "range": "6.0.4 - 8.0.0-alpha.631", "nodes": [ "node_modules/@wdio/junit-reporter" ], "fixAvailable": { "name": "@wdio/junit-reporter", "version": "9.20.0", "isSemVerMajor": true } }, "@wdio/local-runner": { "name": "@wdio/local-runner", "severity": "high", "isDirect": true, "via": [ "@wdio/cli", "@wdio/runner" ], "effects": [], "range": "6.0.4 - 8.46.0", "nodes": [ "node_modules/@wdio/local-runner" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.20.0", "isSemVerMajor": true } }, "@wdio/runner": { "name": "@wdio/runner", "severity": "high", "isDirect": false, "via": [ "webdriverio" ], "effects": [ "@wdio/local-runner" ], "range": "7.16.5 - 8.46.0", "nodes": [ "node_modules/@wdio/runner" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.20.0", "isSemVerMajor": true } }, "@wdio/spec-reporter": { "name": "@wdio/spec-reporter", "severity": "high", "isDirect": true, "via": [ "@wdio/cli" ], "effects": [], "range": "6.0.4 - 8.0.0-alpha.631", "nodes": [ "node_modules/@wdio/spec-reporter" ], "fixAvailable": { "name": "@wdio/spec-reporter", "version": "9.20.0", "isSemVerMajor": true } }, "@wikimedia/wvui": { "name": "@wikimedia/wvui", "severity": "low", "isDirect": true, "via": [ "vue" ], "effects": [], "range": "*", "nodes": [ "node_modules/@wikimedia/wvui" ], "fixAvailable": false }, "anymatch": { "name": "anymatch", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [ "chokidar", "sane" ], "range": "1.2.0 - 2.0.0", "nodes": [ "node_modules/sane/node_modules/anymatch", "node_modules/watchpack-chokidar2/node_modules/anymatch" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "autoprefixer": { "name": "autoprefixer", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [], "range": "1.0.20131222 - 9.8.8", "nodes": [ "node_modules/autoprefixer" ], "fixAvailable": true }, "braces": { "name": "braces", "severity": "high", "isDirect": false, "via": [ { "source": 1098094, "name": "braces", "dependency": "braces", "title": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "severity": "high", "cwe": [ "CWE-400", "CWE-1050" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<3.0.3" } ], "effects": [ "chokidar", "micromatch" ], "range": "<3.0.3", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/braces", "node_modules/@storybook/builder-webpack4/node_modules/braces", "node_modules/@storybook/codemod/node_modules/braces", "node_modules/@storybook/core-common/node_modules/braces", "node_modules/@storybook/core-server/node_modules/braces", "node_modules/@storybook/manager-webpack4/node_modules/braces", "node_modules/@storybook/vue/node_modules/braces", "node_modules/cpy/node_modules/braces", "node_modules/jscodeshift/node_modules/braces", "node_modules/sane/node_modules/braces", "node_modules/vue-docgen-loader/node_modules/braces", "node_modules/watchpack-chokidar2/node_modules/braces" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "chokidar": { "name": "chokidar", "severity": "high", "isDirect": false, "via": [ "anymatch", "braces", "readdirp" ], "effects": [ "watchpack-chokidar2" ], "range": "1.3.0 - 2.1.8", "nodes": [ "node_modules/watchpack-chokidar2/node_modules/chokidar" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "cpy": { "name": "cpy", "severity": "moderate", "isDirect": false, "via": [ "globby" ], "effects": [], "range": "7.0.0 - 8.1.2", "nodes": [ "node_modules/cpy" ], "fixAvailable": true }, "cross-spawn": { "name": "cross-spawn", "severity": "high", "isDirect": false, "via": [ { "source": 1104663, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": [ "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<6.0.6" } ], "effects": [ "yarn-install" ], "range": "<6.0.6", "nodes": [ "node_modules/yarn-install/node_modules/cross-spawn" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "css-loader": { "name": "css-loader", "severity": "moderate", "isDirect": false, "via": [ "icss-utils", "postcss", "postcss-modules-extract-imports", "postcss-modules-local-by-default", "postcss-modules-scope", "postcss-modules-values" ], "effects": [], "range": "0.15.0 - 4.3.0", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/css-loader", "node_modules/@storybook/manager-webpack4/node_modules/css-loader" ], "fixAvailable": true }, "devtools": { "name": "devtools", "severity": "high", "isDirect": false, "via": [ "puppeteer-core" ], "effects": [], "range": ">=7.16.5", "nodes": [ "node_modules/devtools" ], "fixAvailable": true }, "external-editor": { "name": "external-editor", "severity": "low", "isDirect": false, "via": [ "tmp" ], "effects": [ "inquirer" ], "range": ">=1.1.1", "nodes": [ "node_modules/external-editor" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "fast-glob": { "name": "fast-glob", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [ "globby" ], "range": "<=2.2.7", "nodes": [ "node_modules/cpy/node_modules/fast-glob" ], "fixAvailable": true }, "fork-ts-checker-webpack-plugin": { "name": "fork-ts-checker-webpack-plugin", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [], "range": "0.4.14 - 4.1.6", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/fork-ts-checker-webpack-plugin" ], "fixAvailable": true }, "form-data": { "name": "form-data", "severity": "critical", "isDirect": false, "via": [ { "source": 1106509, "name": "form-data", "dependency": "form-data", "title": "form-data uses unsafe random function in form-data for choosing boundary", "url": "https://github.com/advisories/GHSA-fjxv-7rqg-78g4", "severity": "critical", "cwe": [ "CWE-330" ], "cvss": { "score": 0, "vectorString": null }, "range": "<2.5.4" } ], "effects": [ "request" ], "range": "<2.5.4", "nodes": [ "node_modules/request/node_modules/form-data" ], "fixAvailable": false }, "global": { "name": "global", "severity": "low", "isDirect": false, "via": [ "min-document" ], "effects": [ "@storybook/addon-a11y", "@storybook/addon-actions", "@storybook/addon-backgrounds", "@storybook/addon-docs", "@storybook/addon-viewport", "@storybook/addons", "@storybook/api", "@storybook/channel-postmessage", "@storybook/channel-websocket", "@storybook/client-api", "@storybook/client-logger", "@storybook/components", "@storybook/core-client", "@storybook/csf-tools", "@storybook/preview-web", "@storybook/router", "@storybook/source-loader", "@storybook/store", "@storybook/theming", "@storybook/ui", "@storybook/vue", "telejson" ], "range": ">=2.0.3", "nodes": [ "node_modules/global" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "globby": { "name": "globby", "severity": "moderate", "isDirect": false, "via": [ "fast-glob" ], "effects": [ "cpy" ], "range": "8.0.0 - 9.2.0", "nodes": [ "node_modules/cpy/node_modules/globby" ], "fixAvailable": true }, "got": { "name": "got", "severity": "moderate", "isDirect": false, "via": [ { "source": 1088948, "name": "got", "dependency": "got", "title": "Got allows a redirect to a UNIX socket", "url": "https://github.com/advisories/GHSA-pfrx-2q88-qq97", "severity": "moderate", "cwe": [], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, "range": "<11.8.5" } ], "effects": [ "package-json" ], "range": "<11.8.5", "nodes": [ "node_modules/got" ], "fixAvailable": true }, "icss-utils": { "name": "icss-utils", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [ "css-loader", "postcss-modules-local-by-default", "postcss-modules-values" ], "range": "<=4.1.1", "nodes": [ "node_modules/icss-utils" ], "fixAvailable": true }, "inquirer": { "name": "inquirer", "severity": "low", "isDirect": false, "via": [ "external-editor" ], "effects": [ "@wdio/cli" ], "range": "3.0.0 - 8.2.6 || 9.0.0 - 9.3.7", "nodes": [ "node_modules/inquirer" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "ip": { "name": "ip", "severity": "high", "isDirect": false, "via": [ { "source": 1101851, "name": "ip", "dependency": "ip", "title": "ip SSRF improper categorization in isPublic", "url": "https://github.com/advisories/GHSA-2p57-rm9w-gvfp", "severity": "high", "cwe": [ "CWE-918" ], "cvss": { "score": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "range": "<=2.0.1" } ], "effects": [ "@storybook/core-server" ], "range": "*", "nodes": [ "node_modules/ip" ], "fixAvailable": true }, "jest-haste-map": { "name": "jest-haste-map", "severity": "moderate", "isDirect": false, "via": [ "sane" ], "effects": [ "@jest/transform" ], "range": "24.0.0-alpha.0 - 26.6.2", "nodes": [ "node_modules/jest-haste-map" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "jscodeshift": { "name": "jscodeshift", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [ "@storybook/cli", "@storybook/codemod", "vue-docgen-loader" ], "range": "0.3.20 - 0.13.1", "nodes": [ "node_modules/@storybook/codemod/node_modules/jscodeshift", "node_modules/jscodeshift", "node_modules/vue-docgen-loader/node_modules/jscodeshift" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "jsdoc": { "name": "jsdoc", "severity": "high", "isDirect": true, "via": [ "taffydb" ], "effects": [], "range": "3.2.0-dev - 3.6.11", "nodes": [ "node_modules/jsdoc" ], "fixAvailable": { "name": "jsdoc", "version": "4.0.4", "isSemVerMajor": true } }, "jsdoc-wmf-theme": { "name": "jsdoc-wmf-theme", "severity": "high", "isDirect": true, "via": [ "taffydb" ], "effects": [], "range": "<=0.0.12", "nodes": [ "node_modules/jsdoc-wmf-theme" ], "fixAvailable": { "name": "jsdoc-wmf-theme", "version": "1.1.0", "isSemVerMajor": true } }, "latest-version": { "name": "latest-version", "severity": "moderate", "isDirect": false, "via": [ "package-json" ], "effects": [ "update-notifier" ], "range": "0.2.0 - 5.1.0", "nodes": [ "node_modules/latest-version" ], "fixAvailable": true }, "micromatch": { "name": "micromatch", "severity": "high", "isDirect": false, "via": [ { "source": 1098681, "name": "micromatch", "dependency": "micromatch", "title": "Regular Expression Denial of Service (ReDoS) in micromatch", "url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<4.0.8" }, "braces" ], "effects": [ "anymatch", "fast-glob", "fork-ts-checker-webpack-plugin", "jscodeshift", "readdirp", "sane", "webpack" ], "range": "<=4.0.7", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/micromatch", "node_modules/@storybook/builder-webpack4/node_modules/micromatch", "node_modules/@storybook/codemod/node_modules/micromatch", "node_modules/@storybook/core-common/node_modules/micromatch", "node_modules/@storybook/core-server/node_modules/micromatch", "node_modules/@storybook/manager-webpack4/node_modules/micromatch", "node_modules/@storybook/vue/node_modules/micromatch", "node_modules/cpy/node_modules/micromatch", "node_modules/jscodeshift/node_modules/micromatch", "node_modules/sane/node_modules/micromatch", "node_modules/vue-docgen-loader/node_modules/micromatch", "node_modules/watchpack-chokidar2/node_modules/micromatch" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "min-document": { "name": "min-document", "severity": "low", "isDirect": false, "via": [ { "source": 1108264, "name": "min-document", "dependency": "min-document", "title": "min-document vulnerable to prototype pollution", "url": "https://github.com/advisories/GHSA-rx8g-88g5-qh64", "severity": "low", "cwe": [ "CWE-1321" ], "cvss": { "score": 0, "vectorString": null }, "range": "<=2.19.0" } ], "effects": [ "global" ], "range": "*", "nodes": [ "node_modules/min-document" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "mwbot": { "name": "mwbot", "severity": "moderate", "isDirect": false, "via": [ "request" ], "effects": [ "wdio-mediawiki" ], "range": ">=0.1.6", "nodes": [ "node_modules/mwbot" ], "fixAvailable": false }, "package-json": { "name": "package-json", "severity": "moderate", "isDirect": false, "via": [ "got" ], "effects": [ "latest-version" ], "range": "<=6.5.0", "nodes": [ "node_modules/package-json" ], "fixAvailable": true }, "postcss": { "name": "postcss", "severity": "moderate", "isDirect": false, "via": [ { "source": 1094544, "name": "postcss", "dependency": "postcss", "title": "PostCSS line return parsing error", "url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "severity": "moderate", "cwe": [ "CWE-74", "CWE-144" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, "range": "<8.4.31" } ], "effects": [ "@storybook/builder-webpack4", "@vue/component-compiler-utils", "autoprefixer", "css-loader", "icss-utils", "postcss-flexbugs-fixes", "postcss-modules-extract-imports", "postcss-modules-local-by-default", "postcss-modules-scope", "postcss-modules-values" ], "range": "<8.4.31", "nodes": [ "node_modules/@storybook/builder-webpack4/node_modules/postcss", "node_modules/@storybook/manager-webpack4/node_modules/postcss", "node_modules/@vue/component-compiler-utils/node_modules/postcss", "node_modules/autoprefixer/node_modules/postcss", "node_modules/icss-utils/node_modules/postcss", "node_modules/postcss-flexbugs-fixes/node_modules/postcss", "node_modules/postcss-modules-extract-imports/node_modules/postcss", "node_modules/postcss-modules-local-by-default/node_modules/postcss", "node_modules/postcss-modules-scope/node_modules/postcss", "node_modules/postcss-modules-values/node_modules/postcss" ], "fixAvailable": { "name": "vue-loader", "version": "17.4.2", "isSemVerMajor": true } }, "postcss-flexbugs-fixes": { "name": "postcss-flexbugs-fixes", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [], "range": "<=4.2.1", "nodes": [ "node_modules/postcss-flexbugs-fixes" ], "fixAvailable": true }, "postcss-modules-extract-imports": { "name": "postcss-modules-extract-imports", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [], "range": "<=2.0.0", "nodes": [ "node_modules/postcss-modules-extract-imports" ], "fixAvailable": true }, "postcss-modules-local-by-default": { "name": "postcss-modules-local-by-default", "severity": "moderate", "isDirect": false, "via": [ "icss-utils", "postcss" ], "effects": [], "range": "<=4.0.0-rc.4", "nodes": [ "node_modules/postcss-modules-local-by-default" ], "fixAvailable": true }, "postcss-modules-scope": { "name": "postcss-modules-scope", "severity": "moderate", "isDirect": false, "via": [ "postcss" ], "effects": [], "range": "<=2.2.0", "nodes": [ "node_modules/postcss-modules-scope" ], "fixAvailable": true }, "postcss-modules-values": { "name": "postcss-modules-values", "severity": "moderate", "isDirect": false, "via": [ "icss-utils", "postcss" ], "effects": [ "css-loader" ], "range": "<=4.0.0-rc.5", "nodes": [ "node_modules/postcss-modules-values" ], "fixAvailable": true }, "prismjs": { "name": "prismjs", "severity": "moderate", "isDirect": false, "via": [ { "source": 1105770, "name": "prismjs", "dependency": "prismjs", "title": "PrismJS DOM Clobbering vulnerability", "url": "https://github.com/advisories/GHSA-x7hr-w5r2-h6wg", "severity": "moderate", "cwe": [ "CWE-79", "CWE-94" ], "cvss": { "score": 4.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, "range": "<1.30.0" } ], "effects": [ "refractor" ], "range": "<1.30.0", "nodes": [ "node_modules/refractor/node_modules/prismjs" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "puppeteer-core": { "name": "puppeteer-core", "severity": "high", "isDirect": false, "via": [ "tar-fs", "ws" ], "effects": [ "devtools", "webdriverio" ], "range": "10.0.0 - 22.11.1", "nodes": [ "node_modules/devtools/node_modules/puppeteer-core", "node_modules/webdriverio/node_modules/puppeteer-core" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "react-syntax-highlighter": { "name": "react-syntax-highlighter", "severity": "moderate", "isDirect": false, "via": [ "refractor" ], "effects": [ "@storybook/addon-storysource", "@storybook/components" ], "range": ">=6.0.0", "nodes": [ "node_modules/@storybook/addon-docs/node_modules/react-syntax-highlighter", "node_modules/react-syntax-highlighter" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "readdirp": { "name": "readdirp", "severity": "moderate", "isDirect": false, "via": [ "micromatch" ], "effects": [ "chokidar" ], "range": "2.2.0 - 2.2.1", "nodes": [ "node_modules/watchpack-chokidar2/node_modules/readdirp" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "refractor": { "name": "refractor", "severity": "moderate", "isDirect": false, "via": [ "prismjs" ], "effects": [ "react-syntax-highlighter" ], "range": "<=4.6.0", "nodes": [ "node_modules/refractor" ], "fixAvailable": { "name": "@storybook/addon-storysource", "version": "8.6.14", "isSemVerMajor": true } }, "remark-mdx": { "name": "remark-mdx", "severity": "high", "isDirect": false, "via": [ "remark-parse" ], "effects": [ "@mdx-js/mdx" ], "range": "<=1.6.22", "nodes": [ "node_modules/remark-mdx" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "remark-parse": { "name": "remark-parse", "severity": "high", "isDirect": false, "via": [ "trim" ], "effects": [ "@mdx-js/mdx", "remark-mdx" ], "range": "<=8.0.3", "nodes": [ "node_modules/remark-parse" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "request": { "name": "request", "severity": "critical", "isDirect": false, "via": [ { "source": 1096727, "name": "request", "dependency": "request", "title": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "severity": "moderate", "cwe": [ "CWE-918" ], "cvss": { "score": 6.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, "range": "<=2.88.2" }, "form-data", "tough-cookie" ], "effects": [ "mwbot" ], "range": "*", "nodes": [ "node_modules/request" ], "fixAvailable": false }, "sane": { "name": "sane", "severity": "moderate", "isDirect": false, "via": [ "anymatch", "micromatch" ], "effects": [ "jest-haste-map" ], "range": "1.5.0 - 4.1.0", "nodes": [ "node_modules/sane" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "storybook": { "name": "storybook", "severity": "moderate", "isDirect": true, "via": [ "@storybook/cli" ], "effects": [], "range": "5.3.0 - 7.0.0-rc.11", "nodes": [ "node_modules/storybook" ], "fixAvailable": { "name": "storybook", "version": "9.1.10", "isSemVerMajor": true } }, "taffydb": { "name": "taffydb", "severity": "high", "isDirect": false, "via": [ { "source": 1089386, "name": "taffydb", "dependency": "taffydb", "title": "TaffyDB can allow access to any data items in the DB", "url": "https://github.com/advisories/GHSA-mxhp-79qh-mcx6", "severity": "high", "cwe": [ "CWE-20", "CWE-668" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "range": "<=2.7.3" } ], "effects": [ "jsdoc", "jsdoc-wmf-theme" ], "range": "*", "nodes": [ "node_modules/taffydb" ], "fixAvailable": { "name": "jsdoc", "version": "4.0.4", "isSemVerMajor": true } }, "tar-fs": { "name": "tar-fs", "severity": "high", "isDirect": false, "via": [ { "source": 1106930, "name": "tar-fs", "dependency": "tar-fs", "title": "tar-fs can extract outside the specified dir with a specific tarball", "url": "https://github.com/advisories/GHSA-8cj5-5rvv-wf4v", "severity": "high", "cwe": [ "CWE-22" ], "cvss": { "score": 0, "vectorString": null }, "range": ">=2.0.0 <2.1.3" }, { "source": 1108293, "name": "tar-fs", "dependency": "tar-fs", "title": "tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball", "url": "https://github.com/advisories/GHSA-vj76-c3g6-qr5v", "severity": "high", "cwe": [ "CWE-22", "CWE-61" ], "cvss": { "score": 0, "vectorString": null }, "range": ">=2.0.0 <2.1.4" }, { "source": 1108411, "name": "tar-fs", "dependency": "tar-fs", "title": "tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File", "url": "https://github.com/advisories/GHSA-pq67-2wwv-3xjx", "severity": "high", "cwe": [ "CWE-22" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, "range": ">=2.0.0 <2.1.2" } ], "effects": [ "puppeteer-core" ], "range": "2.0.0 - 2.1.3", "nodes": [ "node_modules/tar-fs" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "telejson": { "name": "telejson", "severity": "low", "isDirect": false, "via": [ "global" ], "effects": [ "@storybook/addon-actions", "@storybook/channel-postmessage", "@storybook/channel-websocket", "@storybook/core-common", "@storybook/core-server" ], "range": "<=6.0.8", "nodes": [ "node_modules/@storybook/addon-a11y/node_modules/telejson", "node_modules/@storybook/addon-actions/node_modules/telejson", "node_modules/@storybook/addon-backgrounds/node_modules/telejson", "node_modules/@storybook/addon-controls/node_modules/telejson", "node_modules/@storybook/addon-docs/node_modules/telejson", "node_modules/@storybook/addon-viewport/node_modules/telejson", "node_modules/@storybook/core-common/node_modules/telejson", "node_modules/@storybook/preview-web/node_modules/telejson", "node_modules/@storybook/source-loader/node_modules/telejson", "node_modules/@storybook/store/node_modules/telejson", "node_modules/telejson" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "terser-webpack-plugin": { "name": "terser-webpack-plugin", "severity": "moderate", "isDirect": false, "via": [ "webpack" ], "effects": [ "webpack" ], "range": "<=2.2.1", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/terser-webpack-plugin", "node_modules/@storybook/builder-webpack4/node_modules/webpack/node_modules/terser-webpack-plugin", "node_modules/@storybook/core-common/node_modules/terser-webpack-plugin", "node_modules/@storybook/core-server/node_modules/terser-webpack-plugin", "node_modules/@storybook/manager-webpack4/node_modules/webpack/node_modules/terser-webpack-plugin", "node_modules/@storybook/vue/node_modules/terser-webpack-plugin" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "tmp": { "name": "tmp", "severity": "low", "isDirect": false, "via": [ { "source": 1106849, "name": "tmp", "dependency": "tmp", "title": "tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter", "url": "https://github.com/advisories/GHSA-52f5-9888-hmc6", "severity": "low", "cwe": [ "CWE-59" ], "cvss": { "score": 2.5, "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" }, "range": "<=0.2.3" } ], "effects": [ "external-editor" ], "range": "<=0.2.3", "nodes": [ "node_modules/tmp" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "tough-cookie": { "name": "tough-cookie", "severity": "moderate", "isDirect": false, "via": [ { "source": 1097682, "name": "tough-cookie", "dependency": "tough-cookie", "title": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "severity": "moderate", "cwe": [ "CWE-1321" ], "cvss": { "score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, "range": "<4.1.3" } ], "effects": [ "request" ], "range": "<4.1.3", "nodes": [ "node_modules/tough-cookie" ], "fixAvailable": false }, "trim": { "name": "trim", "severity": "high", "isDirect": false, "via": [ { "source": 1089867, "name": "trim", "dependency": "trim", "title": "Regular Expression Denial of Service in trim", "url": "https://github.com/advisories/GHSA-w5p7-h5w8-2hfq", "severity": "high", "cwe": [ "CWE-400" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<0.0.3" } ], "effects": [ "remark-parse" ], "range": "<0.0.3", "nodes": [ "node_modules/trim" ], "fixAvailable": { "name": "@storybook/addon-docs", "version": "9.1.10", "isSemVerMajor": true } }, "update-notifier": { "name": "update-notifier", "severity": "moderate", "isDirect": false, "via": [ "latest-version" ], "effects": [], "range": "0.2.0 - 5.1.0", "nodes": [ "node_modules/update-notifier" ], "fixAvailable": true }, "vue": { "name": "vue", "severity": "low", "isDirect": true, "via": [ { "source": 1100238, "name": "vue", "dependency": "vue", "title": "ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function", "url": "https://github.com/advisories/GHSA-5j4c-8p2g-v4jx", "severity": "low", "cwe": [ "CWE-1333" ], "cvss": { "score": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": ">=2.0.0-alpha.1 <3.0.0-alpha.0" } ], "effects": [ "@storybook/vue", "@wikimedia/wvui" ], "range": "2.0.0-alpha.1 - 2.7.16", "nodes": [ "node_modules/vue" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "vue-docgen-loader": { "name": "vue-docgen-loader", "severity": "moderate", "isDirect": false, "via": [ "jscodeshift" ], "effects": [ "@storybook/vue" ], "range": "1.3.0-beta.0 - 2.0.0", "nodes": [ "node_modules/vue-docgen-loader" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "vue-loader": { "name": "vue-loader", "severity": "moderate", "isDirect": true, "via": [ "@vue/component-compiler-utils" ], "effects": [ "@storybook/vue" ], "range": "15.0.0-beta.1 - 15.11.1", "nodes": [ "node_modules/vue-loader" ], "fixAvailable": { "name": "vue-loader", "version": "17.4.2", "isSemVerMajor": true } }, "vue-template-compiler": { "name": "vue-template-compiler", "severity": "moderate", "isDirect": true, "via": [ { "source": 1098721, "name": "vue-template-compiler", "dependency": "vue-template-compiler", "title": "vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)", "url": "https://github.com/advisories/GHSA-g3ch-rx76-35fx", "severity": "moderate", "cwe": [ "CWE-79" ], "cvss": { "score": 4.2, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" }, "range": ">=2.0.0 <3.0.0" } ], "effects": [ "@storybook/vue" ], "range": ">=2.0.0", "nodes": [ "node_modules/vue-template-compiler" ], "fixAvailable": { "name": "vue-template-compiler", "version": "0.1.0", "isSemVerMajor": true } }, "watchpack": { "name": "watchpack", "severity": "high", "isDirect": false, "via": [ "watchpack-chokidar2" ], "effects": [ "webpack" ], "range": "1.7.2 - 1.7.5", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/watchpack", "node_modules/@storybook/builder-webpack4/node_modules/watchpack", "node_modules/@storybook/core-common/node_modules/watchpack", "node_modules/@storybook/core-server/node_modules/webpack/node_modules/watchpack", "node_modules/@storybook/manager-webpack4/node_modules/watchpack", "node_modules/@storybook/vue/node_modules/watchpack" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "watchpack-chokidar2": { "name": "watchpack-chokidar2", "severity": "high", "isDirect": false, "via": [ "chokidar" ], "effects": [ "watchpack" ], "range": "*", "nodes": [ "node_modules/watchpack-chokidar2" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "wdio-mediawiki": { "name": "wdio-mediawiki", "severity": "moderate", "isDirect": true, "via": [ "mwbot" ], "effects": [], "range": "*", "nodes": [ "node_modules/wdio-mediawiki" ], "fixAvailable": false }, "webdriverio": { "name": "webdriverio", "severity": "high", "isDirect": false, "via": [ "devtools", "puppeteer-core" ], "effects": [ "@wdio/cli", "@wdio/runner" ], "range": "7.16.5 - 8.46.0", "nodes": [ "node_modules/webdriverio" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "webpack": { "name": "webpack", "severity": "high", "isDirect": false, "via": [ "micromatch", "terser-webpack-plugin", "watchpack" ], "effects": [ "@storybook/core-common", "@storybook/core-server", "@storybook/vue", "terser-webpack-plugin" ], "range": "4.0.0-alpha.0 - 5.0.0-rc.6", "nodes": [ "node_modules/@storybook/addon-controls/node_modules/webpack", "node_modules/@storybook/builder-webpack4/node_modules/webpack", "node_modules/@storybook/core-common/node_modules/webpack", "node_modules/@storybook/core-server/node_modules/webpack", "node_modules/@storybook/manager-webpack4/node_modules/webpack", "node_modules/@storybook/vue/node_modules/webpack" ], "fixAvailable": { "name": "@storybook/vue", "version": "5.0.11", "isSemVerMajor": true } }, "webpack-dev-middleware": { "name": "webpack-dev-middleware", "severity": "high", "isDirect": false, "via": [ { "source": 1096729, "name": "webpack-dev-middleware", "dependency": "webpack-dev-middleware", "title": "Path traversal in webpack-dev-middleware", "url": "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "severity": "high", "cwe": [ "CWE-22" ], "cvss": { "score": 7.4, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" }, "range": "<=5.3.3" } ], "effects": [ "@storybook/manager-webpack4" ], "range": "<=5.3.3", "nodes": [ "node_modules/webpack-dev-middleware" ], "fixAvailable": true }, "ws": { "name": "ws", "severity": "high", "isDirect": false, "via": [ { "source": 1098392, "name": "ws", "dependency": "ws", "title": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "severity": "high", "cwe": [ "CWE-476" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": ">=8.0.0 <8.17.1" } ], "effects": [ "puppeteer-core" ], "range": "8.0.0 - 8.17.0", "nodes": [ "node_modules/devtools/node_modules/ws", "node_modules/webdriverio/node_modules/ws" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } }, "yarn-install": { "name": "yarn-install", "severity": "high", "isDirect": false, "via": [ "cross-spawn" ], "effects": [ "@wdio/cli" ], "range": "*", "nodes": [ "node_modules/yarn-install" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.20.0", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 26, "moderate": 40, "high": 36, "critical": 2, "total": 104 }, "dependencies": { "prod": 1, "dev": 3220, "optional": 41, "peer": 387, "peerOptional": 0, "total": 3220 } } } --- end --- Attempting to npm audit fix $ /usr/bin/npm audit fix --dry-run --only=dev --json --- stderr --- npm WARN invalid config only="dev" set in command line options npm WARN invalid config Must be one of: null, prod, production npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1 npm WARN Found: @babel/core@7.11.6 npm WARN node_modules/@babel/core npm WARN dev @babel/core@"7.11.6" from the root project npm WARN 123 more (@babel/helper-create-class-features-plugin, ...) npm WARN npm WARN Could not resolve dependency: npm WARN peer @babel/core@"^7.13.0" from @babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1 npm WARN node_modules/@babel/preset-env/node_modules/@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining npm WARN @babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@"^7.27.1" from @babel/preset-env@7.27.1 npm WARN node_modules/@babel/preset-env npm WARN npm WARN Conflicting peer dependency: @babel/core@7.28.4 npm WARN node_modules/@babel/core npm WARN peer @babel/core@"^7.13.0" from @babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1 npm WARN node_modules/@babel/preset-env/node_modules/@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining npm WARN @babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@"^7.27.1" from @babel/preset-env@7.27.1 npm WARN node_modules/@babel/preset-env npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @babel/plugin-transform-class-static-block@7.27.1 npm WARN Found: @babel/core@7.11.6 npm WARN node_modules/@babel/core npm WARN dev @babel/core@"7.11.6" from the root project npm WARN 123 more (@babel/helper-create-class-features-plugin, ...) npm WARN npm WARN Could not resolve dependency: npm WARN peer @babel/core@"^7.12.0" from @babel/plugin-transform-class-static-block@7.27.1 npm WARN node_modules/@babel/preset-env/node_modules/@babel/plugin-transform-class-static-block npm WARN @babel/plugin-transform-class-static-block@"^7.27.1" from @babel/preset-env@7.27.1 npm WARN node_modules/@babel/preset-env npm WARN npm WARN Conflicting peer dependency: @babel/core@7.28.4 npm WARN node_modules/@babel/core npm WARN peer @babel/core@"^7.12.0" from @babel/plugin-transform-class-static-block@7.27.1 npm WARN node_modules/@babel/preset-env/node_modules/@babel/plugin-transform-class-static-block npm WARN @babel/plugin-transform-class-static-block@"^7.27.1" from @babel/preset-env@7.27.1 npm WARN node_modules/@babel/preset-env npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @storybook/store@6.4.18 npm WARN Found: peer react@"^16.8.0 || ^17.0.0" from the root project npm WARN npm WARN Could not resolve dependency: npm WARN peer react@"^16.8.0 || ^17.0.0" from the root project npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @storybook/store@6.4.18 npm WARN Found: peer react-dom@"^16.8.0 || ^17.0.0" from the root project npm WARN npm WARN Could not resolve dependency: npm WARN peer react-dom@"^16.8.0 || ^17.0.0" from the root project npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: fork-ts-checker-webpack-plugin@6.5.3 npm WARN Found: webpack@4.47.0 npm WARN node_modules/@storybook/builder-webpack4/node_modules/webpack npm WARN webpack@"4" from @storybook/builder-webpack4@6.4.18 npm WARN node_modules/@storybook/builder-webpack4 npm WARN @storybook/builder-webpack4@"6.4.18" from @storybook/core-server@6.4.18 npm WARN node_modules/@storybook/core-server npm WARN 5 more (@storybook/core-common, ...) npm WARN npm WARN Could not resolve dependency: npm WARN peer webpack@">= 4" from fork-ts-checker-webpack-plugin@6.5.3 npm WARN node_modules/@storybook/builder-webpack4/node_modules/@storybook/core-common/node_modules/fork-ts-checker-webpack-plugin npm WARN fork-ts-checker-webpack-plugin@"^6.0.4" from @storybook/core-common@6.4.18 npm WARN node_modules/@storybook/builder-webpack4/node_modules/@storybook/core-common npm WARN npm WARN Conflicting peer dependency: webpack@5.102.0 npm WARN node_modules/webpack npm WARN peer webpack@">= 4" from fork-ts-checker-webpack-plugin@6.5.3 npm WARN node_modules/@storybook/builder-webpack4/node_modules/@storybook/core-common/node_modules/fork-ts-checker-webpack-plugin npm WARN fork-ts-checker-webpack-plugin@"^6.0.4" from @storybook/core-common@6.4.18 npm WARN node_modules/@storybook/builder-webpack4/node_modules/@storybook/core-common npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @storybook/api@6.4.18 npm WARN Found: peer react@"^16.8.0 || ^17.0.0" from the root project npm WARN npm WARN Could not resolve dependency: npm WARN peer react@"^16.8.0 || ^17.0.0" from the root project npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @storybook/api@6.4.18 npm WARN Found: peer react-dom@"^16.8.0 || ^17.0.0" from the root project npm WARN npm WARN Could not resolve dependency: npm WARN peer react-dom@"^16.8.0 || ^17.0.0" from the root project npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @storybook/api@6.4.18 npm WARN Found: peer react@"^16.8.0 || ^17.0.0" from the root project npm WARN npm WARN Could not resolve dependency: npm WARN peer react@"^16.8.0 || ^17.0.0" from the root project npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @storybook/api@6.4.18 npm WARN Found: peer react-dom@"^16.8.0 || ^17.0.0" from the root project npm WARN npm WARN Could not resolve dependency: npm WARN peer react-dom@"^16.8.0 || ^17.0.0" from the root project npm ERR! code ENOENT npm ERR! syscall stat npm ERR! path /cache/_cacache/content-v2/sha512/30/e0/8ed046780605394b2a31ab6f26db813e1f078ef25e7781e7097b7036b142bd96c5c9604ce8bc24ebbdd9d49b35bfb9326ff7e532de9bb7ac62ce343793e5 npm ERR! errno ENOENT npm ERR! enoent Invalid response body while trying to fetch https://registry.npmjs.org/@storybook%2fcsf: ENOENT: no such file or directory, stat '/cache/_cacache/content-v2/sha512/30/e0/8ed046780605394b2a31ab6f26db813e1f078ef25e7781e7097b7036b142bd96c5c9604ce8bc24ebbdd9d49b35bfb9326ff7e532de9bb7ac62ce343793e5' npm ERR! enoent This is related to npm not being able to find a file. npm ERR! enoent npm ERR! A complete log of this run can be found in: npm ERR! /cache/_logs/2025-10-05T05_18_40_998Z-debug-0.log --- stdout --- { "error": { "code": "ENOENT", "summary": "Invalid response body while trying to fetch https://registry.npmjs.org/@storybook%2fcsf: ENOENT: no such file or directory, stat '/cache/_cacache/content-v2/sha512/30/e0/8ed046780605394b2a31ab6f26db813e1f078ef25e7781e7097b7036b142bd96c5c9604ce8bc24ebbdd9d49b35bfb9326ff7e532de9bb7ac62ce343793e5'", "detail": "This is related to npm not being able to find a file.\n" } } --- end --- {"error": {"code": "ENOENT", "summary": "Invalid response body while trying to fetch https://registry.npmjs.org/@storybook%2fcsf: ENOENT: no such file or directory, stat '/cache/_cacache/content-v2/sha512/30/e0/8ed046780605394b2a31ab6f26db813e1f078ef25e7781e7097b7036b142bd96c5c9604ce8bc24ebbdd9d49b35bfb9326ff7e532de9bb7ac62ce343793e5'", "detail": "This is related to npm not being able to find a file.\n"}} Traceback (most recent call last): File "/venv/lib/python3.13/site-packages/runner/__init__.py", line 2030, in main libup.run(args.repo, args.output, args.branch) ~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/venv/lib/python3.13/site-packages/runner/__init__.py", line 1972, in run self.npm_audit_fix(new_npm_audit) ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^ File "/venv/lib/python3.13/site-packages/runner/__init__.py", line 217, in npm_audit_fix if dry_run["audit"]["auditReportVersion"] != 2: ~~~~~~~^^^^^^^^^ KeyError: 'audit'