{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:40:07.048222Z","repo":{"ref":{"host":"github.com","owner":"youzan","name":"zan-proxy"},"default_branch":"master","clone_url":"https://github.com/youzan/zan-proxy.git","html_url":"https://github.com/youzan/zan-proxy","description":"An extensible proxy for PC/Mobile/APP developer","stars":1825,"forks":184,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":9401,"primary_language":"TypeScript","license_spdx":"MIT","created_at":"2018-04-21T07:47:06Z","pushed_at":"2020-08-07T08:43:45Z","security_policy_url":null,"distribution":{"owner_created_at":"2015-03-10T08:21:20Z","owner_type":"Organization","release_assets":[{"name":"Zan.Proxy-5.1.0.dmg","size":79876204,"download_count":1769,"release_tag":"v5.1.0","url":"https://github.com/youzan/zan-proxy/releases/download/v5.1.0/Zan.Proxy-5.1.0.dmg"},{"name":"Zan.Proxy-5.0.0.dmg","size":79420170,"download_count":237,"release_tag":"v5.0.0","url":"https://github.com/youzan/zan-proxy/releases/download/v5.0.0/Zan.Proxy-5.0.0.dmg"},{"name":"Zan.Proxy-4.1.0.dmg","size":73576668,"download_count":559,"release_tag":"v4.1.0","url":"https://github.com/youzan/zan-proxy/releases/download/v4.1.0/Zan.Proxy-4.1.0.dmg"}]}},"commit_sha":"d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2","profile":{"lines_by_language":{"TypeScript":6795,"Vue":3533,"JavaScript":1410},"files_by_category":{"source":176,"other":52,"docs":42,"config":23,"binary":14,"generated":4,"vendored":2},"source_lines":11738,"test_lines":0},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.61,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":71.0,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":96.2,"duplication":88.9,"lint":68.5,"testing":38.4,"docs":85.0,"type_safety":60.0,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.00, CI runs tests; 1% of function code in complex or long functions; 2% duplicated lines. Weakest area: testing."},"security":{"score":18.4,"confidence":0.85,"coverage":1.0,"label":"poor","breakdown":{"secrets":21.9,"sast":41.7,"dependencies":0.0,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is poor: 1 possible secret(s) in the tree, 6 only in history; 738 known vulnerabilities in 276 dependencies; 12 high-severity SAST findings. Weakest area: dependencies."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":140.0,"checked":140.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":85.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":29143.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2018-04":{"loc":10875,"attributed_loc":0},"2018-05":{"loc":784,"attributed_loc":0},"2018-06":{"loc":86,"attributed_loc":0},"2018-07":{"loc":482,"attributed_loc":0},"2018-08":{"loc":199,"attributed_loc":0},"2018-09":{"loc":415,"attributed_loc":0},"2018-10":{"loc":38,"attributed_loc":0},"2018-11":{"loc":27,"attributed_loc":0},"2019-01":{"loc":2,"attributed_loc":0},"2019-03":{"loc":8607,"attributed_loc":0},"2019-04":{"loc":4,"attributed_loc":0},"2019-05":{"loc":35,"attributed_loc":0},"2019-07":{"loc":10,"attributed_loc":0},"2019-09":{"loc":0,"attributed_loc":0},"2019-11":{"loc":7501,"attributed_loc":0},"2019-12":{"loc":76,"attributed_loc":0},"2020-01":{"loc":2,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":56.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":2449.0,"pre_ai_era_burst_loc":0.0,"measured_loc":2449.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":102.5,"median_loc_per_hour":39.19023655637312,"pr_timed_units":44.0,"excluded_import_loc":26694.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["030b68b30b00e7e39a2e9bf7076c11e54a68e1dc","a0bf58f2b6255da17038de1c5e98ca10063a1a91","cc857205cbc0056e46d6dd39e9ec1b832dec6cf5"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":2.0,"flagged_releases":0.0,"max_loc_per_day":4.8},"findings":[],"evidence":[],"data":{"releases":[{"from":"v4.1.0","to":"v5.0.0","loc":148,"days":248.03,"loc_per_day":0.6,"flagged":false},{"from":"v5.0.0","to":"v5.1.0","loc":221,"days":46.25,"loc_per_day":4.8,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":11738.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":1.0,"secrets_history":6.0,"secrets_nonprod":1.0,"secrets_low_confidence":2.0},"findings":[{"rule_id":"gitleaks/private-key","severity":"high","message":"Possible private-key secret in the current tree","path":"resource/certificate/zproxy.key.pem","line":1,"fingerprint":"resource/certificate/zproxy.key.pem:private-key:1"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit d9113bcefc); removed from the current tree but still retrievable","path":"refactor/src_old/impl/file/ruleService.js","line":7,"fingerprint":"d9113bcefc9dd198887437ef86a97cbdb2404847:refactor/src_old/impl/file/ruleService.js:generic-api-key:7"},{"rule_id":"gitleaks/private-key","severity":"medium","message":"Possible private-key secret in history (commit d9113bcefc); removed from the current tree but still retrievable","path":"refactor/src_old/impl/file/certificationService.js","line":151,"fingerprint":"d9113bcefc9dd198887437ef86a97cbdb2404847:refactor/src_old/impl/file/certificationService.js:private-key:151"},{"rule_id":"gitleaks/private-key","severity":"medium","message":"Possible private-key secret in history (commit d9113bcefc); removed from the current tree but still retrievable","path":"src/impl/file/certificationService.js","line":151,"fingerprint":"d9113bcefc9dd198887437ef86a97cbdb2404847:src/impl/file/certificationService.js:private-key:151"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit d9113bcefc); removed from the current tree but still retrievable","path":"src/impl/file/ruleService.js","line":7,"fingerprint":"d9113bcefc9dd198887437ef86a97cbdb2404847:src/impl/file/ruleService.js:generic-api-key:7"},{"rule_id":"gitleaks/private-key","severity":"medium","message":"Possible private-key secret in history (commit a0bf58f2b6); removed from the current tree but still retrievable","path":"certificate/zproxy.key.pem","line":1,"fingerprint":"a0bf58f2b6255da17038de1c5e98ca10063a1a91:certificate/zproxy.key.pem:private-key:1"},{"rule_id":"gitleaks/private-key","severity":"medium","message":"Possible private-key secret in history (commit a0bf58f2b6); removed from the current tree but still retrievable","path":"rootca/charles.key.pem","line":1,"fingerprint":"a0bf58f2b6255da17038de1c5e98ca10063a1a91:rootca/charles.key.pem:private-key:1"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit a0bf58f2b6); removed from the current tree but still retrievable","path":"test/App/services/rule.spec.ts","line":38,"fingerprint":"a0bf58f2b6255da17038de1c5e98ca10063a1a91:test/App/services/rule.spec.ts:generic-api-key:38"},{"rule_id":"gitleaks/private-key","severity":"medium","message":"Possible private-key secret in history (commit a0bf58f2b6); removed from the current tree but still retrievable","path":"rootca/zproxy.key.pem","line":1,"fingerprint":"a0bf58f2b6255da17038de1c5e98ca10063a1a91:rootca/zproxy.key.pem:private-key:1"},{"rule_id":"gitleaks/private-key","severity":"medium","message":"Possible private-key secret in history (commit a0bf58f2b6); removed from the current tree but still retrievable","path":"rootca/clientKey.pem","line":1,"fingerprint":"a0bf58f2b6255da17038de1c5e98ca10063a1a91:rootca/clientKey.pem:private-key:1"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":94.0,"findings_high":12.0,"findings_medium":81.0,"findings_low":1.0,"weighted_findings":29.312,"scanned_lines":11738.0,"parse_errors":2.0},"findings":[{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.browser.security.insecure-document-method:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `H.appendChild(e).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.browser.security.insecure-innerhtml:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.browser.security.insecure-document-method:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `t.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.browser.security.insecure-innerhtml:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.express.security.audit.remote-property-injection","severity":"high","message":"Bracket object notation with user input is present, this might allow an attacker to access all properties of the object and even it's prototype. Use literal values for object properties. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":3,"fingerprint":"javascript.express.security.audit.remote-property-injection:docs/book/gitbook/gitbook.js:3"},{"rule_id":"opengrep/javascript.express.security.audit.remote-property-injection","severity":"high","message":"Bracket object notation with user input is present, this might allow an attacker to access all properties of the object and even it's prototype. Use literal values for object properties. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":3,"fingerprint":"javascript.express.security.audit.remote-property-injection:docs/book/gitbook/gitbook.js:3"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.browser.security.insecure-document-method:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `H.appendChild(e).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.browser.security.insecure-innerhtml:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.browser.security.insecure-document-method:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `t.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.browser.security.insecure-innerhtml:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.express.security.audit.remote-property-injection","severity":"high","message":"Bracket object notation with user input is present, this might allow an attacker to access all properties of the object and even it's prototype. Use literal values for object properties. [confidence low]","path":"docs/book/gitbook/theme.js","line":3,"fingerprint":"javascript.express.security.audit.remote-property-injection:docs/book/gitbook/theme.js:3"},{"rule_id":"opengrep/javascript.express.security.audit.remote-property-injection","severity":"high","message":"Bracket object notation with user input is present, this might allow an attacker to access all properties of the object and even it's prototype. Use literal values for object properties. [confidence low]","path":"docs/book/gitbook/theme.js","line":3,"fingerprint":"javascript.express.security.audit.remote-property-injection:docs/book/gitbook/theme.js:3"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":".build/utils.js","line":33,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:.build/utils.js:33"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":".build/utils.js","line":33,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:.build/utils.js:33"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-require","severity":"medium","message":"Detected the use of require(variable). Calling require with a non-literal argument might allow an attacker to load and run arbitrary code, or access arbitrary files. [confidence low]","path":"docs/book/gitbook/gitbook-plugin-fontsettings/fontsettings.js","line":1,"fingerprint":"javascript.lang.security.audit.detect-non-literal-require:docs/book/gitbook/gitbook-plugin-fontsettings/fontsettings.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/gitbook-plugin-fontsettings/fontsettings.js","line":147,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:docs/book/gitbook/gitbook-plugin-fontsettings/fontsettings.js:147"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-require","severity":"medium","message":"Detected the use of require(variable). Calling require with a non-literal argument might allow an attacker to load and run arbitrary code, or access arbitrary files. [confidence low]","path":"docs/book/gitbook/gitbook-plugin-search/search-engine.js","line":1,"fingerprint":"javascript.lang.security.audit.detect-non-literal-require:docs/book/gitbook/gitbook-plugin-search/search-engine.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-require","severity":"medium","message":"Detected the use of require(variable). Calling require with a non-literal argument might allow an attacker to load and run arbitrary code, or access arbitrary files. [confidence low]","path":"docs/book/gitbook/gitbook-plugin-search/search.js","line":1,"fingerprint":"javascript.lang.security.audit.detect-non-literal-require:docs/book/gitbook/gitbook-plugin-search/search.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"docs/book/gitbook/gitbook-plugin-search/search.js","line":64,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:docs/book/gitbook/gitbook-plugin-search/search.js:64"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"docs/book/gitbook/gitbook-plugin-search/search.js","line":64,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:docs/book/gitbook/gitbook-plugin-search/search.js:64"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `name` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled [confidence low]","path":"docs/book/gitbook/gitbook-plugin-search/search.js","line":175,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:docs/book/gitbook/gitbook-plugin-search/search.js:175"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `key` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled  [confidence low]","path":"docs/book/gitbook/gitbook-plugin-search/search.js","line":186,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:docs/book/gitbook/gitbook-plugin-search/search.js:186"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `\":(\"` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a library which offers default sa [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.security.audit.detect-redos:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `\"^\"` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a library which offers default saf [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.security.audit.detect-redos:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `e` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `t` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `t` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"docs/book/gitbook/gitbook.js","line":3,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:docs/book/gitbook/gitbook.js:3"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":3,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/gitbook.js:3"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"docs/book/gitbook/gitbook.js","line":3,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:docs/book/gitbook/gitbook.js:3"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `\":(\"` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a library which offers default sa [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.security.audit.detect-redos:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `\"^\"` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a library which offers default saf [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.security.audit.detect-redos:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `e` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `t` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `t` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"docs/book/gitbook/theme.js","line":3,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:docs/book/gitbook/theme.js:3"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":3,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:3"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"docs/book/gitbook/theme.js","line":3,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:docs/book/gitbook/theme.js:3"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"docs/book/gitbook/theme.js","line":3,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:docs/book/gitbook/theme.js:3"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `ctx` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled  [confidence low]","path":"src/core/manager/controller/rule.ts","line":90,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:src/core/manager/controller/rule.ts:90"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/resetDataFiles.ts","line":81,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/resetDataFiles.ts:81"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/resetDataFiles.ts","line":90,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/resetDataFiles.ts:90"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/resetDataFiles.ts","line":99,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/resetDataFiles.ts:99"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/resetDataFiles.ts","line":119,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/resetDataFiles.ts:119"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/resetDataFiles.ts","line":119,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/resetDataFiles.ts:119"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/host.ts","line":31,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/host.ts:31"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/host.ts","line":38,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/host.ts:38"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/host.ts","line":38,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/host.ts:38"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/host.ts","line":52,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/host.ts:52"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/httpTraffic.ts","line":34,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/httpTraffic.ts:34"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/httpTraffic.ts","line":153,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/httpTraffic.ts:153"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/httpTraffic.ts","line":160,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/httpTraffic.ts:160"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/mock.ts","line":24,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/mock.ts:24"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/mock.ts","line":25,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/mock.ts:25"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/mock.ts","line":110,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/mock.ts:110"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/plugin.ts","line":27,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/plugin.ts:27"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/plugin.ts","line":252,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/plugin.ts:252"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/plugin.ts","line":259,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/plugin.ts:259"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/profile.ts","line":36,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/profile.ts:36"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `match` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlle [confidence low]","path":"src/core/services/profile.ts","line":124,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:src/core/services/profile.ts:124"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `index` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlle [confidence low]","path":"src/core/services/profile.ts","line":129,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:src/core/services/profile.ts:129"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/rule.ts","line":25,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/rule.ts:25"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/rule.ts","line":32,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/rule.ts:32"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/rule.ts","line":32,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/rule.ts:32"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/services/rule.ts","line":63,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/services/rule.ts:63"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `ruleMatchStr` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-co [confidence low]","path":"src/core/services/rule.ts","line":195,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:src/core/services/rule.ts:195"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/storage/certificate.ts","line":30,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/storage/certificate.ts:30"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/core/storage/certificate.ts","line":34,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/core/storage/certificate.ts:34"},{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.var-in-script-tag","severity":"medium","message":"Detected a template variable used in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent cross-site scripting (XSS) attacks when used directly in JavaScript. If you need this data on the rendered page, consider placing it in the HTML portion (outside of  [confidence low]","path":"src/gui/index.ejs","line":9,"fingerprint":"javascript.express.security.audit.xss.ejs.var-in-script-tag:src/gui/index.ejs:9"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/gui/main/core/application.ts","line":214,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/gui/main/core/application.ts:214"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"src/gui/main/utils/homePath.ts","line":12,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:src/gui/main/utils/homePath.ts:12"},{"rule_id":"opengrep/javascript.browser.security.js-open-redirect-from-function","severity":"low","message":"The application accepts potentially user-controlled input `e` which can control the location of the current window context. This can lead two types of vulnerabilities open-redirection and Cross-Site-Scripting (XSS) with JavaScript URIs. It is recommended to validate user-controllable input before al [confidence low]","path":"docs/book/gitbook/theme.js","line":4,"fingerprint":"javascript.browser.security.js-open-redirect-from-function:docs/book/gitbook/theme.js:4"}],"evidence":[],"data":{"rulesets":["typescript","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":276.0,"vulnerabilities":738.0,"vulns_critical":61.0,"vulns_high":331.0,"vulns_medium":273.0,"vulns_low":45.0,"vulns_unknown":28.0,"penalty":2142.0},"findings":[{"rule_id":"osv/GHSA-rq8g-5pc5-wrhr","severity":"critical","message":"cryptiles@3.1.2 (npm) is affected by GHSA-rq8g-5pc5-wrhr; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"cryptiles@3.1.2 (npm):GHSA-rq8g-5pc5-wrhr"},{"rule_id":"osv/GHSA-hr2v-3952-633q","severity":"critical","message":"deep-extend@0.4.2 (npm) is affected by GHSA-hr2v-3952-633q; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"deep-extend@0.4.2 (npm):GHSA-hr2v-3952-633q"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@1.0.1 (npm) is affected by GHSA-fjxv-7rqg-78g4; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"form-data@1.0.1 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.1.4 (npm) is affected by GHSA-fjxv-7rqg-78g4; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"form-data@2.1.4 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.3.2 (npm) is affected by GHSA-fjxv-7rqg-78g4; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"form-data@2.3.2 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-896r-f27r-55mw","severity":"critical","message":"json-schema@0.2.3 (npm) is affected by GHSA-896r-f27r-55mw; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"json-schema@0.2.3 (npm):GHSA-896r-f27r-55mw"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.17.4 (npm) is affected by GHSA-jf85-cpcp-j695; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.17.5 (npm) is affected by GHSA-jf85-cpcp-j695; also in docs/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"lodash@4.17.5 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.10 (npm) is affected by GHSA-xvch-5gv4-984h; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"minimist@0.0.10 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.8 (npm) is affected by GHSA-xvch-5gv4-984h; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"minimist@0.0.8 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@1.2.0 (npm) is affected by GHSA-xvch-5gv4-984h; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"minimist@1.2.0 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@2.2.1 (npm) is affected by GHSA-23hp-3jrh-7fpw; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"@babel/traverse@7.3.4 (npm) is affected by GHSA-67hx-6x53-jw92; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"@babel/traverse@7.3.4 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-cpq7-6gpm-g9rc","severity":"critical","message":"cipher-base@1.0.4 (npm) is affected by GHSA-cpq7-6gpm-g9rc; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"cipher-base@1.0.4 (npm):GHSA-cpq7-6gpm-g9rc"},{"rule_id":"osv/GHSA-phwq-j96m-2c2q","severity":"critical","message":"ejs@2.6.1 (npm) is affected by GHSA-phwq-j96m-2c2q; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"ejs@2.6.1 (npm):GHSA-phwq-j96m-2c2q"},{"rule_id":"osv/GHSA-vjh7-7g9h-fjfh","severity":"critical","message":"elliptic@6.4.1 (npm) is affected by GHSA-vjh7-7g9h-fjfh; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-vjh7-7g9h-fjfh"},{"rule_id":"osv/GHSA-3gx7-xhv7-5mx3","severity":"critical","message":"eslint-utils@1.3.1 (npm) is affected by GHSA-3gx7-xhv7-5mx3","path":"webui/yarn.lock","line":null,"fingerprint":"eslint-utils@1.3.1 (npm):GHSA-3gx7-xhv7-5mx3"},{"rule_id":"osv/GHSA-6h5x-7c5m-7cr7","severity":"critical","message":"eventsource@1.0.7 (npm) is affected by GHSA-6h5x-7c5m-7cr7; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"eventsource@1.0.7 (npm):GHSA-6h5x-7c5m-7cr7"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.3.3 (npm) is affected by GHSA-fjxv-7rqg-78g4; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"form-data@2.3.3 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-8r6j-v8pm-fqw3","severity":"critical","message":"fsevents@1.2.7 (npm) is affected by GHSA-8r6j-v8pm-fqw3; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"fsevents@1.2.7 (npm):GHSA-8r6j-v8pm-fqw3"},{"rule_id":"osv/GHSA-qh2h-chj9-jffq","severity":"critical","message":"growl@1.9.2 (npm) is affected by GHSA-qh2h-chj9-jffq","path":"webui/yarn.lock","line":null,"fingerprint":"growl@1.9.2 (npm):GHSA-qh2h-chj9-jffq"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@0.2.17 (npm) is affected by GHSA-76p3-8jx3-jpfq; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"loader-utils@0.2.17 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@1.2.3 (npm) is affected by GHSA-76p3-8jx3-jpfq; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"loader-utils@1.2.3 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.17.11 (npm) is affected by GHSA-jf85-cpcp-j695; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash.defaultsdeep@4.6.0 (npm) is affected by GHSA-jf85-cpcp-j695","path":"webui/yarn.lock","line":null,"fingerprint":"lodash.defaultsdeep@4.6.0 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-fhjf-83wg-r2j9","severity":"critical","message":"mixin-deep@1.3.1 (npm) is affected by GHSA-fhjf-83wg-r2j9; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"mixin-deep@1.3.1 (npm):GHSA-fhjf-83wg-r2j9"},{"rule_id":"osv/GHSA-92xj-mqp7-vmcj","severity":"critical","message":"node-forge@0.7.5 (npm) is affected by GHSA-92xj-mqp7-vmcj","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-92xj-mqp7-vmcj"},{"rule_id":"osv/GHSA-h7cp-r72f-jxh6","severity":"critical","message":"pbkdf2@3.0.17 (npm) is affected by GHSA-h7cp-r72f-jxh6; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"pbkdf2@3.0.17 (npm):GHSA-h7cp-r72f-jxh6"},{"rule_id":"osv/GHSA-v62p-rq8g-8h59","severity":"critical","message":"pbkdf2@3.0.17 (npm) is affected by GHSA-v62p-rq8g-8h59; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"pbkdf2@3.0.17 (npm):GHSA-v62p-rq8g-8h59"},{"rule_id":"osv/GHSA-6fw4-hr69-g3rv","severity":"critical","message":"property-expr@1.5.1 (npm) is affected by GHSA-6fw4-hr69-g3rv","path":"webui/yarn.lock","line":null,"fingerprint":"property-expr@1.5.1 (npm):GHSA-6fw4-hr69-g3rv"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.4 (npm) is affected by GHSA-jqcg-44mw-7w3h; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"proxy-addr@2.0.4 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-4g88-fppr-53pp","severity":"critical","message":"set-value@0.4.3 (npm) is affected by GHSA-4g88-fppr-53pp; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"set-value@0.4.3 (npm):GHSA-4g88-fppr-53pp"},{"rule_id":"osv/GHSA-4g88-fppr-53pp","severity":"critical","message":"set-value@2.0.0 (npm) is affected by GHSA-4g88-fppr-53pp; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"set-value@2.0.0 (npm):GHSA-4g88-fppr-53pp"},{"rule_id":"osv/GHSA-95m3-7q98-8xr5","severity":"critical","message":"sha.js@2.4.11 (npm) is affected by GHSA-95m3-7q98-8xr5; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"sha.js@2.4.11 (npm):GHSA-95m3-7q98-8xr5"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.6.1 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"webui/yarn.lock","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-9w5j-4mwv-2wj8","severity":"critical","message":"simple-git@1.107.0 (npm) is affected by GHSA-9w5j-4mwv-2wj8","path":"webui/yarn.lock","line":null,"fingerprint":"simple-git@1.107.0 (npm):GHSA-9w5j-4mwv-2wj8"},{"rule_id":"osv/GHSA-hffm-xvc3-vprc","severity":"critical","message":"simple-git@1.107.0 (npm) is affected by GHSA-hffm-xvc3-vprc","path":"webui/yarn.lock","line":null,"fingerprint":"simple-git@1.107.0 (npm):GHSA-hffm-xvc3-vprc"},{"rule_id":"osv/GHSA-qm95-pgcg-qqfq","severity":"critical","message":"socket.io-parser@3.3.0 (npm) is affected by GHSA-qm95-pgcg-qqfq","path":"webui/yarn.lock","line":null,"fingerprint":"socket.io-parser@3.3.0 (npm):GHSA-qm95-pgcg-qqfq"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@4.4.8 (npm) is affected by GHSA-23hp-3jrh-7fpw; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-hgjh-723h-mx2j","severity":"critical","message":"url-parse@1.4.4 (npm) is affected by GHSA-hgjh-723h-mx2j; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"url-parse@1.4.4 (npm):GHSA-hgjh-723h-mx2j"},{"rule_id":"osv/GHSA-xv26-6w52-cph6","severity":"critical","message":"websocket-driver@0.7.0 (npm) is affected by GHSA-xv26-6w52-cph6; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"websocket-driver@0.7.0 (npm):GHSA-xv26-6w52-cph6"},{"rule_id":"osv/GHSA-72mh-269x-7mh5","severity":"critical","message":"xmlhttprequest-ssl@1.5.5 (npm) is affected by GHSA-72mh-269x-7mh5","path":"webui/yarn.lock","line":null,"fingerprint":"xmlhttprequest-ssl@1.5.5 (npm):GHSA-72mh-269x-7mh5"},{"rule_id":"osv/GHSA-h4j5-c7cj-74xg","severity":"critical","message":"xmlhttprequest-ssl@1.5.5 (npm) is affected by GHSA-h4j5-c7cj-74xg","path":"webui/yarn.lock","line":null,"fingerprint":"xmlhttprequest-ssl@1.5.5 (npm):GHSA-h4j5-c7cj-74xg"},{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"@babel/traverse@7.6.2 (npm) is affected by GHSA-67hx-6x53-jw92","path":"yarn.lock","line":null,"fingerprint":"@babel/traverse@7.6.2 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-fj58-h2fr-3pp2","severity":"critical","message":"class-validator@0.8.5 (npm) is affected by GHSA-fj58-h2fr-3pp2","path":"yarn.lock","line":null,"fingerprint":"class-validator@0.8.5 (npm):GHSA-fj58-h2fr-3pp2"},{"rule_id":"osv/GHSA-phwq-j96m-2c2q","severity":"critical","message":"ejs@2.7.1 (npm) is affected by GHSA-phwq-j96m-2c2q","path":"yarn.lock","line":null,"fingerprint":"ejs@2.7.1 (npm):GHSA-phwq-j96m-2c2q"},{"rule_id":"osv/GHSA-phwq-j96m-2c2q","severity":"critical","message":"ejs@3.0.1 (npm) is affected by GHSA-phwq-j96m-2c2q","path":"yarn.lock","line":null,"fingerprint":"ejs@3.0.1 (npm):GHSA-phwq-j96m-2c2q"},{"rule_id":"osv/GHSA-wf6x-7x77-mvgw","severity":"critical","message":"immutable@3.7.6 (npm) is affected by GHSA-wf6x-7x77-mvgw","path":"yarn.lock","line":null,"fingerprint":"immutable@3.7.6 (npm):GHSA-wf6x-7x77-mvgw"},{"rule_id":"osv/GHSA-wf6x-7x77-mvgw","severity":"critical","message":"immutable@3.8.2 (npm) is affected by GHSA-wf6x-7x77-mvgw","path":"yarn.lock","line":null,"fingerprint":"immutable@3.8.2 (npm):GHSA-wf6x-7x77-mvgw"},{"rule_id":"osv/GHSA-593f-38f6-jp5m","severity":"critical","message":"koa@2.7.0 (npm) is affected by GHSA-593f-38f6-jp5m","path":"yarn.lock","line":null,"fingerprint":"koa@2.7.0 (npm):GHSA-593f-38f6-jp5m"},{"rule_id":"osv/GHSA-4c7m-wxvm-r7gc","severity":"critical","message":"netmask@1.0.6 (npm) is affected by GHSA-4c7m-wxvm-r7gc, GHSA-pch5-whg9-qr2r","path":"yarn.lock","line":null,"fingerprint":"netmask@1.0.6 (npm):GHSA-4c7m-wxvm-r7gc"},{"rule_id":"osv/GHSA-92xj-mqp7-vmcj","severity":"critical","message":"node-forge@0.8.2 (npm) is affected by GHSA-92xj-mqp7-vmcj","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.8.2 (npm):GHSA-92xj-mqp7-vmcj"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.5 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"yarn.lock","line":null,"fingerprint":"proxy-addr@2.0.5 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-g4rg-993r-mgx7","severity":"critical","message":"shell-quote@1.7.2 (npm) is affected by GHSA-g4rg-993r-mgx7","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.7.2 (npm):GHSA-g4rg-993r-mgx7"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.7.2 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.7.2 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-qm95-pgcg-qqfq","severity":"critical","message":"socket.io-parser@2.3.1 (npm) is affected by GHSA-qm95-pgcg-qqfq","path":"yarn.lock","line":null,"fingerprint":"socket.io-parser@2.3.1 (npm):GHSA-qm95-pgcg-qqfq"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@2.2.2 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.2 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@4.4.13 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-29xr-v42j-r956","severity":"critical","message":"thenify@3.3.0 (npm) is affected by GHSA-29xr-v42j-r956","path":"yarn.lock","line":null,"fingerprint":"thenify@3.3.0 (npm):GHSA-29xr-v42j-r956"},{"rule_id":"osv/GHSA-72mh-269x-7mh5","severity":"critical","message":"xmlhttprequest-ssl@1.5.3 (npm) is affected by GHSA-72mh-269x-7mh5","path":"yarn.lock","line":null,"fingerprint":"xmlhttprequest-ssl@1.5.3 (npm):GHSA-72mh-269x-7mh5"},{"rule_id":"osv/GHSA-h4j5-c7cj-74xg","severity":"critical","message":"xmlhttprequest-ssl@1.5.3 (npm) is affected by GHSA-h4j5-c7cj-74xg","path":"yarn.lock","line":null,"fingerprint":"xmlhttprequest-ssl@1.5.3 (npm):GHSA-h4j5-c7cj-74xg"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@3.0.0 (npm) is affected by GHSA-93q8-gq69-wqmw; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"ansi-regex@3.0.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-fwr7-v2mv-hh25","severity":"high","message":"async@2.6.0 (npm) is affected by GHSA-fwr7-v2mv-hh25; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"async@2.6.0 (npm):GHSA-fwr7-v2mv-hh25"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-3jxr-9vmj-r5cp; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-6j4f-fj2g-mc7p; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-mh99-v99m-4gvg; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-qhr7-859c-m2p7; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-rgw5-rvv9-x895; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@5.1.0 (npm) is affected by GHSA-3xgq-45jj-v275; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"cross-spawn@5.1.0 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-ff7x-qrg7-qggm","severity":"high","message":"dot-prop@4.2.0 (npm) is affected by GHSA-ff7x-qrg7-qggm; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"dot-prop@4.2.0 (npm):GHSA-ff7x-qrg7-qggm"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@1.0.1 (npm) is affected by GHSA-hmw2-7cc7-3qxx; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"form-data@1.0.1 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.1.4 (npm) is affected by GHSA-hmw2-7cc7-3qxx; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"form-data@2.1.4 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.3.2 (npm) is affected by GHSA-hmw2-7cc7-3qxx; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"form-data@2.3.2 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-xf7w-r453-m56c","severity":"high","message":"fstream@1.0.11 (npm) is affected by GHSA-xf7w-r453-m56c; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"fstream@1.0.11 (npm):GHSA-xf7w-r453-m56c"},{"rule_id":"osv/GHSA-44pw-h2cw-w3vq","severity":"high","message":"hawk@3.1.3 (npm) is affected by GHSA-44pw-h2cw-w3vq; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"hawk@3.1.3 (npm):GHSA-44pw-h2cw-w3vq"},{"rule_id":"osv/GHSA-44pw-h2cw-w3vq","severity":"high","message":"hawk@6.0.2 (npm) is affected by GHSA-44pw-h2cw-w3vq; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"hawk@6.0.2 (npm):GHSA-44pw-h2cw-w3vq"},{"rule_id":"osv/GHSA-c429-5p7v-vgjp","severity":"high","message":"hoek@2.16.3 (npm) is affected by GHSA-c429-5p7v-vgjp; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"hoek@2.16.3 (npm):GHSA-c429-5p7v-vgjp"},{"rule_id":"osv/GHSA-jp4x-w63m-7wgm","severity":"high","message":"hoek@2.16.3 (npm) is affected by GHSA-jp4x-w63m-7wgm; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"hoek@2.16.3 (npm):GHSA-jp4x-w63m-7wgm"},{"rule_id":"osv/GHSA-c429-5p7v-vgjp","severity":"high","message":"hoek@4.2.1 (npm) is affected by GHSA-c429-5p7v-vgjp; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"hoek@4.2.1 (npm):GHSA-c429-5p7v-vgjp"},{"rule_id":"osv/GHSA-rc47-6667-2j5j","severity":"high","message":"http-cache-semantics@3.8.1 (npm) is affected by GHSA-rc47-6667-2j5j; also in docs/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"http-cache-semantics@3.8.1 (npm):GHSA-rc47-6667-2j5j"},{"rule_id":"osv/GHSA-qqgx-2p2h-9c37","severity":"high","message":"ini@1.3.5 (npm) is affected by GHSA-qqgx-2p2h-9c37; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"ini@1.3.5 (npm):GHSA-qqgx-2p2h-9c37"},{"rule_id":"osv/GHSA-2p57-rm9w-gvfp","severity":"high","message":"ip@1.1.5 (npm) is affected by GHSA-2p57-rm9w-gvfp; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"ip@1.1.5 (npm):GHSA-2p57-rm9w-gvfp"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.4 (npm) is affected by GHSA-35jh-r3h4-6jhm; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.17.4 (npm) is affected by GHSA-p6mc-m468-83gw; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.4 (npm) is affected by GHSA-r5fr-rjxr-66jc; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.5 (npm) is affected by GHSA-35jh-r3h4-6jhm; also in docs/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"lodash@4.17.5 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.17.5 (npm) is affected by GHSA-p6mc-m468-83gw; also in docs/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"lodash@4.17.5 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.5 (npm) is affected by GHSA-r5fr-rjxr-66jc; also in docs/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"lodash@4.17.5 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-23c5-xmqv-rm74; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-3ppc-4f35-3m26; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-7r86-cg39-jmmj; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-f8q6-p94x-37v3","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-f8q6-p94x-37v3; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-f8q6-p94x-37v3"},{"rule_id":"osv/GHSA-4328-8hgf-7wjr","severity":"high","message":"npm@2.15.12 (npm) is affected by GHSA-4328-8hgf-7wjr; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm@2.15.12 (npm):GHSA-4328-8hgf-7wjr"},{"rule_id":"osv/GHSA-m6cx-g6qm-p2cx","severity":"high","message":"npm@2.15.12 (npm) is affected by GHSA-m6cx-g6qm-p2cx; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm@2.15.12 (npm):GHSA-m6cx-g6qm-p2cx"},{"rule_id":"osv/GHSA-ph34-pc88-72gc","severity":"high","message":"npm@2.15.12 (npm) is affected by GHSA-ph34-pc88-72gc; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm@2.15.12 (npm):GHSA-ph34-pc88-72gc"},{"rule_id":"osv/GHSA-x8qc-rrcw-4r46","severity":"high","message":"npm@2.15.12 (npm) is affected by GHSA-x8qc-rrcw-4r46; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm@2.15.12 (npm):GHSA-x8qc-rrcw-4r46"},{"rule_id":"osv/GHSA-4328-8hgf-7wjr","severity":"high","message":"npm@5.1.0 (npm) is affected by GHSA-4328-8hgf-7wjr; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm@5.1.0 (npm):GHSA-4328-8hgf-7wjr"},{"rule_id":"osv/GHSA-m6cx-g6qm-p2cx","severity":"high","message":"npm@5.1.0 (npm) is affected by GHSA-m6cx-g6qm-p2cx; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm@5.1.0 (npm):GHSA-m6cx-g6qm-p2cx"},{"rule_id":"osv/GHSA-ph34-pc88-72gc","severity":"high","message":"npm@5.1.0 (npm) is affected by GHSA-ph34-pc88-72gc; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm@5.1.0 (npm):GHSA-ph34-pc88-72gc"},{"rule_id":"osv/GHSA-x8qc-rrcw-4r46","severity":"high","message":"npm@5.1.0 (npm) is affected by GHSA-x8qc-rrcw-4r46; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm@5.1.0 (npm):GHSA-x8qc-rrcw-4r46"},{"rule_id":"osv/GHSA-pw54-mh39-w3hc","severity":"high","message":"npm-user-validate@0.1.5 (npm) is affected by GHSA-pw54-mh39-w3hc, GHSA-xgh6-85xh-479p; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm-user-validate@0.1.5 (npm):GHSA-pw54-mh39-w3hc"},{"rule_id":"osv/GHSA-pw54-mh39-w3hc","severity":"high","message":"npm-user-validate@1.0.0 (npm) is affected by GHSA-pw54-mh39-w3hc, GHSA-xgh6-85xh-479p; also in docs/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"npm-user-validate@1.0.0 (npm):GHSA-pw54-mh39-w3hc"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.2.3 (npm) is affected by GHSA-hrpp-h998-j3pp; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"qs@6.2.3 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.4.0 (npm) is affected by GHSA-hrpp-h998-j3pp; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"qs@6.4.0 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.5.1 (npm) is affected by GHSA-hrpp-h998-j3pp; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"qs@6.5.1 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@4.3.6 (npm) is affected by GHSA-c2qf-rxjj-qqgw; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"semver@4.3.6 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.1.1 (npm) is affected by GHSA-c2qf-rxjj-qqgw; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"semver@5.1.1 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.3.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"semver@5.3.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.5.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"semver@5.5.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-vx3p-948g-6vhq","severity":"high","message":"ssri@5.3.0 (npm) is affected by GHSA-vx3p-948g-6vhq; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"ssri@5.3.0 (npm):GHSA-vx3p-948g-6vhq"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-34x7-hfp2-rc4v; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-3jfq-g458-7qm9; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-5955-9wpr-37jh; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-83g3-92jg-28cx; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-8qq5-rm4j-mr97; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-8x88-c5mf-7j5w; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-9ppj-qmqm-q256; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-j44m-qm6p-hp7m","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-j44m-qm6p-hp7m; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-j44m-qm6p-hp7m"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-qffp-2rhf-9h96; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-r292-9mhp-454m; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-r6q2-hw4h-h46w; also in docs/yarn.lock; also in webui/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-8cj5-5rvv-wf4v","severity":"high","message":"tar-fs@1.16.0 (npm) is affected by GHSA-8cj5-5rvv-wf4v; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar-fs@1.16.0 (npm):GHSA-8cj5-5rvv-wf4v"},{"rule_id":"osv/GHSA-pq67-2wwv-3xjx","severity":"high","message":"tar-fs@1.16.0 (npm) is affected by GHSA-pq67-2wwv-3xjx; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar-fs@1.16.0 (npm):GHSA-pq67-2wwv-3xjx"},{"rule_id":"osv/GHSA-vj76-c3g6-qr5v","severity":"high","message":"tar-fs@1.16.0 (npm) is affected by GHSA-vj76-c3g6-qr5v; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar-fs@1.16.0 (npm):GHSA-vj76-c3g6-qr5v"},{"rule_id":"osv/GHSA-x2mc-8fgj-3wmr","severity":"high","message":"tar-fs@1.16.0 (npm) is affected by GHSA-x2mc-8fgj-3wmr; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tar-fs@1.16.0 (npm):GHSA-x2mc-8fgj-3wmr"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.31 (npm) is affected by GHSA-ph9p-34f9-6g65; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"tmp@0.0.31 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.1.0 (npm) is affected by GHSA-w5hq-g745-h8pq; also in docs/yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"uuid@3.1.0 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.2.1 (npm) is affected by GHSA-w5hq-g745-h8pq; also in docs/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"uuid@3.2.1 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@3.2.1 (npm) is affected by GHSA-c4w7-xm78-47vh; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"y18n@3.2.1 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@4.0.0 (npm) is affected by GHSA-c4w7-xm78-47vh; also in docs/yarn.lock; also in webui/yarn.lock; also in yarn.lock","path":"docs/book/yarn.lock","line":null,"fingerprint":"y18n@4.0.0 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-6chw-6frg-f759","severity":"high","message":"acorn@5.7.3 (npm) is affected by GHSA-6chw-6frg-f759","path":"webui/yarn.lock","line":null,"fingerprint":"acorn@5.7.3 (npm):GHSA-6chw-6frg-f759"},{"rule_id":"osv/GHSA-6chw-6frg-f759","severity":"high","message":"acorn@6.1.1 (npm) is affected by GHSA-6chw-6frg-f759; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"acorn@6.1.1 (npm):GHSA-6chw-6frg-f759"},{"rule_id":"osv/GHSA-whgm-jr23-g3j9","severity":"high","message":"ansi-html@0.0.7 (npm) is affected by GHSA-whgm-jr23-g3j9; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"ansi-html@0.0.7 (npm):GHSA-whgm-jr23-g3j9"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@4.0.0 (npm) is affected by GHSA-93q8-gq69-wqmw","path":"webui/yarn.lock","line":null,"fingerprint":"ansi-regex@4.0.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@4.1.0 (npm) is affected by GHSA-93q8-gq69-wqmw; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"ansi-regex@4.1.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-42xw-2xvc-qx8m","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-42xw-2xvc-qx8m","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-42xw-2xvc-qx8m"},{"rule_id":"osv/GHSA-43fc-jf86-j433","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-43fc-jf86-j433","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-43fc-jf86-j433"},{"rule_id":"osv/GHSA-62hf-57xw-28j9","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-62hf-57xw-28j9","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-62hf-57xw-28j9"},{"rule_id":"osv/GHSA-6chq-wfr3-2hj9","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-6chq-wfr3-2hj9","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-6chq-wfr3-2hj9"},{"rule_id":"osv/GHSA-cph5-m8f7-6c5x","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-cph5-m8f7-6c5x","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-cph5-m8f7-6c5x"},{"rule_id":"osv/GHSA-hfxv-24rg-xrqf","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-hfxv-24rg-xrqf","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-hfxv-24rg-xrqf"},{"rule_id":"osv/GHSA-j5f8-grm9-p9fc","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-j5f8-grm9-p9fc","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-j5f8-grm9-p9fc"},{"rule_id":"osv/GHSA-jr5f-v2jv-69x6","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-jr5f-v2jv-69x6","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-jr5f-v2jv-69x6"},{"rule_id":"osv/GHSA-p92q-9vqr-4j8v","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-p92q-9vqr-4j8v","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-p92q-9vqr-4j8v"},{"rule_id":"osv/GHSA-pf86-5x62-jrwf","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-pf86-5x62-jrwf","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-pf86-5x62-jrwf"},{"rule_id":"osv/GHSA-pjwm-pj3p-43mv","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-pjwm-pj3p-43mv","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-pjwm-pj3p-43mv"},{"rule_id":"osv/GHSA-pmwg-cvhr-8vh7","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-pmwg-cvhr-8vh7","path":"webui/yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-pmwg-cvhr-8vh7"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.18.3 (npm) is affected by GHSA-27r3-jxmh-p828; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"body-parser@1.18.3 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-qwcr-r2fm-qrc7","severity":"high","message":"body-parser@1.18.3 (npm) is affected by GHSA-qwcr-r2fm-qrc7; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"body-parser@1.18.3 (npm):GHSA-qwcr-r2fm-qrc7"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@2.3.2 (npm) is affected by GHSA-grv7-fg5c-xmjg; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"braces@2.3.2 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-x9w5-v3q2-3rhw","severity":"high","message":"browserify-sign@4.0.4 (npm) is affected by GHSA-x9w5-v3q2-3rhw; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"browserify-sign@4.0.4 (npm):GHSA-x9w5-v3q2-3rhw"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.4.2 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"webui/yarn.lock","line":null,"fingerprint":"browserslist@4.4.2 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.4.2 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"webui/yarn.lock","line":null,"fingerprint":"browserslist@4.4.2 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.5.5 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"webui/yarn.lock","line":null,"fingerprint":"browserslist@4.5.5 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.5.5 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"webui/yarn.lock","line":null,"fingerprint":"browserslist@4.5.5 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-vc2v-76pw-4v95","severity":"high","message":"compression@1.7.4 (npm) is affected by GHSA-vc2v-76pw-4v95; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"compression@1.7.4 (npm):GHSA-vc2v-76pw-4v95"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@3.0.1 (npm) is affected by GHSA-3xgq-45jj-v275; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"cross-spawn@3.0.1 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@6.0.5 (npm) is affected by GHSA-3xgq-45jj-v275; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"cross-spawn@6.0.5 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-9vvw-cc9w-f27h","severity":"high","message":"debug@2.2.0 (npm) is affected by GHSA-9vvw-cc9w-f27h; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"debug@2.2.0 (npm):GHSA-9vvw-cc9w-f27h"},{"rule_id":"osv/GHSA-qr28-fpjm-wq7f","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-qr28-fpjm-wq7f; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-qr28-fpjm-wq7f"},{"rule_id":"osv/GHSA-w573-4hg7-7wgq","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-w573-4hg7-7wgq; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-w573-4hg7-7wgq"},{"rule_id":"osv/GHSA-3wcq-x3mq-6r9p","severity":"high","message":"dns-packet@1.3.1 (npm) is affected by GHSA-3wcq-x3mq-6r9p; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"dns-packet@1.3.1 (npm):GHSA-3wcq-x3mq-6r9p"},{"rule_id":"osv/GHSA-vh7m-p724-62c2","severity":"high","message":"elliptic@6.4.1 (npm) is affected by GHSA-vh7m-p724-62c2; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-vh7m-p724-62c2"},{"rule_id":"osv/GHSA-25h7-pfq9-p65f","severity":"high","message":"flatted@2.0.0 (npm) is affected by GHSA-25h7-pfq9-p65f","path":"webui/yarn.lock","line":null,"fingerprint":"flatted@2.0.0 (npm):GHSA-25h7-pfq9-p65f"},{"rule_id":"osv/GHSA-rf6f-7fwh-wjgh","severity":"high","message":"flatted@2.0.0 (npm) is affected by GHSA-rf6f-7fwh-wjgh","path":"webui/yarn.lock","line":null,"fingerprint":"flatted@2.0.0 (npm):GHSA-rf6f-7fwh-wjgh"},{"rule_id":"osv/GHSA-74fj-2j2h-c42q","severity":"high","message":"follow-redirects@1.7.0 (npm) is affected by GHSA-74fj-2j2h-c42q","path":"webui/yarn.lock","line":null,"fingerprint":"follow-redirects@1.7.0 (npm):GHSA-74fj-2j2h-c42q"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.3.3 (npm) is affected by GHSA-hmw2-7cc7-3qxx; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"form-data@2.3.3 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-c429-5p7v-vgjp","severity":"high","message":"hoek@6.1.2 (npm) is affected by GHSA-c429-5p7v-vgjp","path":"webui/yarn.lock","line":null,"fingerprint":"hoek@6.1.2 (npm):GHSA-c429-5p7v-vgjp"},{"rule_id":"osv/GHSA-pfq8-rq6v-vf5m","severity":"high","message":"html-minifier@3.5.21 (npm) is affected by GHSA-pfq8-rq6v-vf5m; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"html-minifier@3.5.21 (npm):GHSA-pfq8-rq6v-vf5m"},{"rule_id":"osv/GHSA-6x33-pw7p-hmpq","severity":"high","message":"http-proxy@1.17.0 (npm) is affected by GHSA-6x33-pw7p-hmpq; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"http-proxy@1.17.0 (npm):GHSA-6x33-pw7p-hmpq"},{"rule_id":"osv/GHSA-c7qv-q95q-8v27","severity":"high","message":"http-proxy-middleware@0.19.1 (npm) is affected by GHSA-c7qv-q95q-8v27; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"http-proxy-middleware@0.19.1 (npm):GHSA-c7qv-q95q-8v27"},{"rule_id":"osv/GHSA-7r28-3m3f-r2pr","severity":"high","message":"is-svg@3.0.0 (npm) is affected by GHSA-7r28-3m3f-r2pr","path":"webui/yarn.lock","line":null,"fingerprint":"is-svg@3.0.0 (npm):GHSA-7r28-3m3f-r2pr"},{"rule_id":"osv/GHSA-r8j5-h5cx-65gg","severity":"high","message":"is-svg@3.0.0 (npm) is affected by GHSA-r8j5-h5cx-65gg","path":"webui/yarn.lock","line":null,"fingerprint":"is-svg@3.0.0 (npm):GHSA-r8j5-h5cx-65gg"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.12.2 (npm) is affected by GHSA-2883-xcg3-v3hh; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"js-yaml@3.12.2 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.12.2 (npm) is affected by GHSA-52cp-r559-cp3m; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"js-yaml@3.12.2 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.12.2 (npm) is affected by GHSA-5p4m-2wfm-xmqj; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"js-yaml@3.12.2 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.13.1 (npm) is affected by GHSA-2883-xcg3-v3hh; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"js-yaml@3.13.1 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.13.1 (npm) is affected by GHSA-52cp-r559-cp3m; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"js-yaml@3.13.1 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.13.1 (npm) is affected by GHSA-5p4m-2wfm-xmqj; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"js-yaml@3.13.1 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@0.5.1 (npm) is affected by GHSA-9c47-m6qq-7p4h; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"json5@0.5.1 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@1.0.1 (npm) is affected by GHSA-9c47-m6qq-7p4h; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"json5@1.0.1 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@2.1.0 (npm) is affected by GHSA-9c47-m6qq-7p4h; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"json5@2.1.0 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-6c8f-qphg-qjgp","severity":"high","message":"kind-of@6.0.2 (npm) is affected by GHSA-6c8f-qphg-qjgp; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"kind-of@6.0.2 (npm):GHSA-6c8f-qphg-qjgp"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"launch-editor@2.2.1 (npm) is affected by GHSA-587h-7wmj-h5pm","path":"webui/yarn.lock","line":null,"fingerprint":"launch-editor@2.2.1 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-c27g-q93r-2cwf","severity":"high","message":"launch-editor@2.2.1 (npm) is affected by GHSA-c27g-q93r-2cwf","path":"webui/yarn.lock","line":null,"fingerprint":"launch-editor@2.2.1 (npm):GHSA-c27g-q93r-2cwf"},{"rule_id":"osv/GHSA-3rfm-jhwj-7488","severity":"high","message":"loader-utils@1.2.3 (npm) is affected by GHSA-3rfm-jhwj-7488; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"loader-utils@1.2.3 (npm):GHSA-3rfm-jhwj-7488"},{"rule_id":"osv/GHSA-hhq3-ff78-jv3g","severity":"high","message":"loader-utils@1.2.3 (npm) is affected by GHSA-hhq3-ff78-jv3g; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"loader-utils@1.2.3 (npm):GHSA-hhq3-ff78-jv3g"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.11 (npm) is affected by GHSA-35jh-r3h4-6jhm; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.17.11 (npm) is affected by GHSA-p6mc-m468-83gw; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.11 (npm) is affected by GHSA-r5fr-rjxr-66jc; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.15 (npm) is affected by GHSA-35jh-r3h4-6jhm; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"lodash@4.17.15 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.17.15 (npm) is affected by GHSA-p6mc-m468-83gw; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"lodash@4.17.15 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.15 (npm) is affected by GHSA-r5fr-rjxr-66jc; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"lodash@4.17.15 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@0.3.0 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"webui/yarn.lock","line":null,"fingerprint":"minimatch@0.3.0 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@0.3.0 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"webui/yarn.lock","line":null,"fingerprint":"minimatch@0.3.0 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@0.3.0 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"webui/yarn.lock","line":null,"fingerprint":"minimatch@0.3.0 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-f8q6-p94x-37v3","severity":"high","message":"minimatch@0.3.0 (npm) is affected by GHSA-f8q6-p94x-37v3","path":"webui/yarn.lock","line":null,"fingerprint":"minimatch@0.3.0 (npm):GHSA-f8q6-p94x-37v3"},{"rule_id":"osv/GHSA-hxm2-r34f-qmc5","severity":"high","message":"minimatch@0.3.0 (npm) is affected by GHSA-hxm2-r34f-qmc5","path":"webui/yarn.lock","line":null,"fingerprint":"minimatch@0.3.0 (npm):GHSA-hxm2-r34f-qmc5"},{"rule_id":"osv/GHSA-2328-f5f3-gj25","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-2328-f5f3-gj25","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-2328-f5f3-gj25"},{"rule_id":"osv/GHSA-554w-wpv2-vw27","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-554w-wpv2-vw27","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-554w-wpv2-vw27"},{"rule_id":"osv/GHSA-5gfm-wpxj-wjgq","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-5gfm-wpxj-wjgq","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-5gfm-wpxj-wjgq"},{"rule_id":"osv/GHSA-5m6q-g25r-mvwx","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-5m6q-g25r-mvwx","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-5m6q-g25r-mvwx"},{"rule_id":"osv/GHSA-5x38-2vff-x55p","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-5x38-2vff-x55p","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-5x38-2vff-x55p"},{"rule_id":"osv/GHSA-6qrw-m8cv-hcxf","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-6qrw-m8cv-hcxf","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-6qrw-m8cv-hcxf"},{"rule_id":"osv/GHSA-7wch-p9px-956x","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-7wch-p9px-956x","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-7wch-p9px-956x"},{"rule_id":"osv/GHSA-86w9-cpqp-85rv","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-86w9-cpqp-85rv, GHSA-ppp5-5v6c-4jwp","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-86w9-cpqp-85rv"},{"rule_id":"osv/GHSA-8hrf-8g6f-7xwp","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-8hrf-8g6f-7xwp","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-8hrf-8g6f-7xwp"},{"rule_id":"osv/GHSA-cfm4-qjh2-4765","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-cfm4-qjh2-4765","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-cfm4-qjh2-4765"},{"rule_id":"osv/GHSA-hqq3-7jhf-c5jx","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-hqq3-7jhf-c5jx","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-hqq3-7jhf-c5jx"},{"rule_id":"osv/GHSA-jc66-7q78-782g","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-jc66-7q78-782g","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-jc66-7q78-782g"},{"rule_id":"osv/GHSA-q67f-28xg-22rw","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-q67f-28xg-22rw","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-q67f-28xg-22rw"},{"rule_id":"osv/GHSA-rhr8-3pm8-cq29","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-rhr8-3pm8-cq29","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-rhr8-3pm8-cq29"},{"rule_id":"osv/GHSA-x4jg-mjrx-434g","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-x4jg-mjrx-434g","path":"webui/yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-x4jg-mjrx-434g"},{"rule_id":"osv/GHSA-rp65-9cf3-cjxr","severity":"high","message":"nth-check@1.0.2 (npm) is affected by GHSA-rp65-9cf3-cjxr; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"nth-check@1.0.2 (npm):GHSA-rp65-9cf3-cjxr"},{"rule_id":"osv/GHSA-37ch-88jc-xwx2","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-37ch-88jc-xwx2, GHSA-9wv6-86v2-598j; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-37ch-88jc-xwx2"},{"rule_id":"osv/GHSA-rhx6-c78j-4q9w","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-rhx6-c78j-4q9w; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-rhx6-c78j-4q9w"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@6.0.23 (npm) is affected by GHSA-6g55-p6wh-862q","path":"webui/yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@6.0.23 (npm) is affected by GHSA-r28c-9q8g-f849","path":"webui/yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@7.0.14 (npm) is affected by GHSA-6g55-p6wh-862q; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"postcss@7.0.14 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@7.0.14 (npm) is affected by GHSA-r28c-9q8g-f849; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"postcss@7.0.14 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.5.2 (npm) is affected by GHSA-hrpp-h998-j3pp; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-7mwh-4pqv-wmr8","severity":"high","message":"scss-tokenizer@0.2.3 (npm) is affected by GHSA-7mwh-4pqv-wmr8; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"scss-tokenizer@0.2.3 (npm):GHSA-7mwh-4pqv-wmr8"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.6.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"semver@5.6.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@6.0.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"webui/yarn.lock","line":null,"fingerprint":"semver@6.0.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-5c6j-r48x-rmvq","severity":"high","message":"serialize-javascript@1.6.1 (npm) is affected by GHSA-5c6j-r48x-rmvq","path":"webui/yarn.lock","line":null,"fingerprint":"serialize-javascript@1.6.1 (npm):GHSA-5c6j-r48x-rmvq"},{"rule_id":"osv/GHSA-hxcc-f52p-wc94","severity":"high","message":"serialize-javascript@1.6.1 (npm) is affected by GHSA-hxcc-f52p-wc94","path":"webui/yarn.lock","line":null,"fingerprint":"serialize-javascript@1.6.1 (npm):GHSA-hxcc-f52p-wc94"},{"rule_id":"osv/GHSA-4jqc-8m5r-9rpr","severity":"high","message":"set-value@0.4.3 (npm) is affected by GHSA-4jqc-8m5r-9rpr; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"set-value@0.4.3 (npm):GHSA-4jqc-8m5r-9rpr"},{"rule_id":"osv/GHSA-4jqc-8m5r-9rpr","severity":"high","message":"set-value@2.0.0 (npm) is affected by GHSA-4jqc-8m5r-9rpr; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"set-value@2.0.0 (npm):GHSA-4jqc-8m5r-9rpr"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.6.1 (npm) is affected by GHSA-395f-4hp3-45gv","path":"webui/yarn.lock","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-28xr-mwxg-3qc8","severity":"high","message":"simple-git@1.107.0 (npm) is affected by GHSA-28xr-mwxg-3qc8","path":"webui/yarn.lock","line":null,"fingerprint":"simple-git@1.107.0 (npm):GHSA-28xr-mwxg-3qc8"},{"rule_id":"osv/GHSA-3f95-r44v-8mrg","severity":"high","message":"simple-git@1.107.0 (npm) is affected by GHSA-3f95-r44v-8mrg","path":"webui/yarn.lock","line":null,"fingerprint":"simple-git@1.107.0 (npm):GHSA-3f95-r44v-8mrg"},{"rule_id":"osv/GHSA-858h-whjf-mvg5","severity":"high","message":"simple-git@1.107.0 (npm) is affected by GHSA-858h-whjf-mvg5","path":"webui/yarn.lock","line":null,"fingerprint":"simple-git@1.107.0 (npm):GHSA-858h-whjf-mvg5"},{"rule_id":"osv/GHSA-9p95-fxvg-qgq2","severity":"high","message":"simple-git@1.107.0 (npm) is affected by GHSA-9p95-fxvg-qgq2","path":"webui/yarn.lock","line":null,"fingerprint":"simple-git@1.107.0 (npm):GHSA-9p95-fxvg-qgq2"},{"rule_id":"osv/GHSA-g4wm-2vf7-vfgr","severity":"high","message":"simple-git@1.107.0 (npm) is affected by GHSA-g4wm-2vf7-vfgr","path":"webui/yarn.lock","line":null,"fingerprint":"simple-git@1.107.0 (npm):GHSA-g4wm-2vf7-vfgr"},{"rule_id":"osv/GHSA-jcxm-m3jx-f287","severity":"high","message":"simple-git@1.107.0 (npm) is affected by GHSA-jcxm-m3jx-f287","path":"webui/yarn.lock","line":null,"fingerprint":"simple-git@1.107.0 (npm):GHSA-jcxm-m3jx-f287"},{"rule_id":"osv/GHSA-2m8v-j782-fhvr","severity":"high","message":"socket.io-parser@3.3.0 (npm) is affected by GHSA-2m8v-j782-fhvr","path":"webui/yarn.lock","line":null,"fingerprint":"socket.io-parser@3.3.0 (npm):GHSA-2m8v-j782-fhvr"},{"rule_id":"osv/GHSA-677m-j7p3-52f9","severity":"high","message":"socket.io-parser@3.3.0 (npm) is affected by GHSA-677m-j7p3-52f9","path":"webui/yarn.lock","line":null,"fingerprint":"socket.io-parser@3.3.0 (npm):GHSA-677m-j7p3-52f9"},{"rule_id":"osv/GHSA-cqmj-92xf-r6r9","severity":"high","message":"socket.io-parser@3.3.0 (npm) is affected by GHSA-cqmj-92xf-r6r9","path":"webui/yarn.lock","line":null,"fingerprint":"socket.io-parser@3.3.0 (npm):GHSA-cqmj-92xf-r6r9"},{"rule_id":"osv/GHSA-xfhh-g9f5-x4m4","severity":"high","message":"socket.io-parser@3.3.0 (npm) is affected by GHSA-xfhh-g9f5-x4m4","path":"webui/yarn.lock","line":null,"fingerprint":"socket.io-parser@3.3.0 (npm):GHSA-xfhh-g9f5-x4m4"},{"rule_id":"osv/GHSA-vx3p-948g-6vhq","severity":"high","message":"ssri@6.0.1 (npm) is affected by GHSA-vx3p-948g-6vhq; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"ssri@6.0.1 (npm):GHSA-vx3p-948g-6vhq"},{"rule_id":"osv/GHSA-2p49-hgcm-8545","severity":"high","message":"svgo@1.2.0 (npm) is affected by GHSA-2p49-hgcm-8545","path":"webui/yarn.lock","line":null,"fingerprint":"svgo@1.2.0 (npm):GHSA-2p49-hgcm-8545"},{"rule_id":"osv/GHSA-w27v-7q3p-w38r","severity":"high","message":"svgo@1.2.0 (npm) is affected by GHSA-w27v-7q3p-w38r","path":"webui/yarn.lock","line":null,"fingerprint":"svgo@1.2.0 (npm):GHSA-w27v-7q3p-w38r"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-34x7-hfp2-rc4v; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-3jfq-g458-7qm9; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-5955-9wpr-37jh; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-83g3-92jg-28cx; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-8qq5-rm4j-mr97; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-8x88-c5mf-7j5w; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-9ppj-qmqm-q256; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-9r2w-394v-53qc","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-9r2w-394v-53qc; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-9r2w-394v-53qc"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-qffp-2rhf-9h96; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-qq89-hq3f-393p","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-qq89-hq3f-393p; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-qq89-hq3f-393p"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-r292-9mhp-454m; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r628-mhmh-qjhw","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-r628-mhmh-qjhw; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-r628-mhmh-qjhw"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@4.4.8 (npm) is affected by GHSA-r6q2-hw4h-h46w; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"tar@4.4.8 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-4wf5-vphf-c2xc","severity":"high","message":"terser@3.16.1 (npm) is affected by GHSA-4wf5-vphf-c2xc","path":"webui/yarn.lock","line":null,"fingerprint":"terser@3.16.1 (npm):GHSA-4wf5-vphf-c2xc"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.33 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"webui/yarn.lock","line":null,"fingerprint":"tmp@0.0.33 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@1.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"trim-newlines@1.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.3.2 (npm) is affected by GHSA-w5hq-g745-h8pq; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"uuid@3.3.2 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-g84c-rxfj-3j2c","severity":"high","message":"webpack-dev-middleware@3.6.2 (npm) is affected by GHSA-g84c-rxfj-3j2c","path":"webui/yarn.lock","line":null,"fingerprint":"webpack-dev-middleware@3.6.2 (npm):GHSA-g84c-rxfj-3j2c"},{"rule_id":"osv/GHSA-wr3j-pwj9-hqq6","severity":"high","message":"webpack-dev-middleware@3.6.2 (npm) is affected by GHSA-wr3j-pwj9-hqq6","path":"webui/yarn.lock","line":null,"fingerprint":"webpack-dev-middleware@3.6.2 (npm):GHSA-wr3j-pwj9-hqq6"},{"rule_id":"osv/GHSA-g78m-2chm-r7qv","severity":"high","message":"websocket-extensions@0.1.3 (npm) is affected by GHSA-g78m-2chm-r7qv; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"websocket-extensions@0.1.3 (npm):GHSA-g78m-2chm-r7qv"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@6.1.4 (npm) is affected by GHSA-3h5v-q93c-6h6q; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"ws@6.1.4 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@6.1.4 (npm) is affected by GHSA-96hv-2xvq-fx4p; also in yarn.lock","path":"webui/yarn.lock","line":null,"fingerprint":"ws@6.1.4 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-6chw-6frg-f759","severity":"high","message":"acorn@6.3.0 (npm) is affected by GHSA-6chw-6frg-f759","path":"yarn.lock","line":null,"fingerprint":"acorn@6.3.0 (npm):GHSA-6chw-6frg-f759"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@5.0.0 (npm) is affected by GHSA-93q8-gq69-wqmw","path":"yarn.lock","line":null,"fingerprint":"ansi-regex@5.0.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-7g7r-gx96-252g","severity":"high","message":"app-builder-lib@21.2.0 (npm) is affected by GHSA-7g7r-gx96-252g","path":"yarn.lock","line":null,"fingerprint":"app-builder-lib@21.2.0 (npm):GHSA-7g7r-gx96-252g"},{"rule_id":"osv/GHSA-r4pf-3v7r-hh55","severity":"high","message":"app-builder-lib@21.2.0 (npm) is affected by GHSA-r4pf-3v7r-hh55","path":"yarn.lock","line":null,"fingerprint":"app-builder-lib@21.2.0 (npm):GHSA-r4pf-3v7r-hh55"},{"rule_id":"osv/GHSA-7g7r-gx96-252g","severity":"high","message":"app-builder-lib@22.2.0 (npm) is affected by GHSA-7g7r-gx96-252g","path":"yarn.lock","line":null,"fingerprint":"app-builder-lib@22.2.0 (npm):GHSA-7g7r-gx96-252g"},{"rule_id":"osv/GHSA-r4pf-3v7r-hh55","severity":"high","message":"app-builder-lib@22.2.0 (npm) is affected by GHSA-r4pf-3v7r-hh55","path":"yarn.lock","line":null,"fingerprint":"app-builder-lib@22.2.0 (npm):GHSA-r4pf-3v7r-hh55"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.19.0 (npm) is affected by GHSA-27r3-jxmh-p828","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.19.0 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-qwcr-r2fm-qrc7","severity":"high","message":"body-parser@1.19.0 (npm) is affected by GHSA-qwcr-r2fm-qrc7","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.19.0 (npm):GHSA-qwcr-r2fm-qrc7"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@3.0.2 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"yarn.lock","line":null,"fingerprint":"braces@3.0.2 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.7.0 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.7.0 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.7.0 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.7.0 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-p2f4-r6v6-j797","severity":"high","message":"builder-util-runtime@8.3.0 (npm) is affected by GHSA-p2f4-r6v6-j797","path":"yarn.lock","line":null,"fingerprint":"builder-util-runtime@8.3.0 (npm):GHSA-p2f4-r6v6-j797"},{"rule_id":"osv/GHSA-p2f4-r6v6-j797","severity":"high","message":"builder-util-runtime@8.5.0 (npm) is affected by GHSA-p2f4-r6v6-j797","path":"yarn.lock","line":null,"fingerprint":"builder-util-runtime@8.5.0 (npm):GHSA-p2f4-r6v6-j797"},{"rule_id":"osv/GHSA-9vvw-cc9w-f27h","severity":"high","message":"debug@2.3.3 (npm) is affected by GHSA-9vvw-cc9w-f27h","path":"yarn.lock","line":null,"fingerprint":"debug@2.3.3 (npm):GHSA-9vvw-cc9w-f27h"},{"rule_id":"osv/GHSA-9j49-mfvp-vmhm","severity":"high","message":"degenerator@1.0.4 (npm) is affected by GHSA-9j49-mfvp-vmhm","path":"yarn.lock","line":null,"fingerprint":"degenerator@1.0.4 (npm):GHSA-9j49-mfvp-vmhm"},{"rule_id":"osv/GHSA-ff7x-qrg7-qggm","severity":"high","message":"dot-prop@3.0.0 (npm) is affected by GHSA-ff7x-qrg7-qggm","path":"yarn.lock","line":null,"fingerprint":"dot-prop@3.0.0 (npm):GHSA-ff7x-qrg7-qggm"},{"rule_id":"osv/GHSA-532v-xpq5-8h95","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-532v-xpq5-8h95","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-532v-xpq5-8h95"},{"rule_id":"osv/GHSA-8337-3p73-46f4","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-8337-3p73-46f4","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-8337-3p73-46f4"},{"rule_id":"osv/GHSA-9f4c-93c8-jc8g","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-9f4c-93c8-jc8g","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-9f4c-93c8-jc8g"},{"rule_id":"osv/GHSA-9qh4-3jw8-366w","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-9qh4-3jw8-366w","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-9qh4-3jw8-366w"},{"rule_id":"osv/GHSA-9wfr-w7mm-pc7f","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-9wfr-w7mm-pc7f","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-9wfr-w7mm-pc7f"},{"rule_id":"osv/GHSA-gr2m-v5gq-v685","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-gr2m-v5gq-v685","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-gr2m-v5gq-v685"},{"rule_id":"osv/GHSA-h7rp-cf8h-j98x","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-h7rp-cf8h-j98x","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-h7rp-cf8h-j98x"},{"rule_id":"osv/GHSA-h9jc-284h-533g","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-h9jc-284h-533g","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-h9jc-284h-533g"},{"rule_id":"osv/GHSA-hq2x-r82h-9wj4","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-hq2x-r82h-9wj4","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-hq2x-r82h-9wj4"},{"rule_id":"osv/GHSA-j84w-jfhq-vhvj","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-j84w-jfhq-vhvj","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-j84w-jfhq-vhvj"},{"rule_id":"osv/GHSA-jjp3-mq3x-295m","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-jjp3-mq3x-295m","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-jjp3-mq3x-295m"},{"rule_id":"osv/GHSA-jr5w-w6x2-84p9","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-jr5w-w6x2-84p9","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-jr5w-w6x2-84p9"},{"rule_id":"osv/GHSA-m93v-9qjc-3g79","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-m93v-9qjc-3g79","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-m93v-9qjc-3g79"},{"rule_id":"osv/GHSA-qqvq-6xgj-jw8g","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-qqvq-6xgj-jw8g","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-qqvq-6xgj-jw8g"},{"rule_id":"osv/GHSA-v3j7-r9gq-3gjw","severity":"high","message":"electron@4.2.10 (npm) is affected by GHSA-v3j7-r9gq-3gjw","path":"yarn.lock","line":null,"fingerprint":"electron@4.2.10 (npm):GHSA-v3j7-r9gq-3gjw"},{"rule_id":"osv/GHSA-j4f2-536g-r55m","severity":"high","message":"engine.io@1.8.5 (npm) is affected by GHSA-j4f2-536g-r55m","path":"yarn.lock","line":null,"fingerprint":"engine.io@1.8.5 (npm):GHSA-j4f2-536g-r55m"},{"rule_id":"osv/GHSA-7pqw-9j4j-h8q3","severity":"high","message":"extract-zip@1.6.7 (npm) is affected by GHSA-7pqw-9j4j-h8q3","path":"yarn.lock","line":null,"fingerprint":"extract-zip@1.6.7 (npm):GHSA-7pqw-9j4j-h8q3"},{"rule_id":"osv/GHSA-jmr9-qjv8-65gv","severity":"high","message":"extract-zip@1.6.7 (npm) is affected by GHSA-jmr9-qjv8-65gv","path":"yarn.lock","line":null,"fingerprint":"extract-zip@1.6.7 (npm):GHSA-jmr9-qjv8-65gv"},{"rule_id":"osv/GHSA-74fj-2j2h-c42q","severity":"high","message":"follow-redirects@1.5.0 (npm) is affected by GHSA-74fj-2j2h-c42q","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.0 (npm):GHSA-74fj-2j2h-c42q"},{"rule_id":"osv/GHSA-4q6p-r6v2-jvc5","severity":"high","message":"get-func-name@2.0.0 (npm) is affected by GHSA-4q6p-r6v2-jvc5","path":"yarn.lock","line":null,"fingerprint":"get-func-name@2.0.0 (npm):GHSA-4q6p-r6v2-jvc5"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.4471,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":1.0,"binary_assets":3.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release v5.1.0 ships Zan.Proxy-5.1.0.dmg (1769 downloads)","ref":"Zan.Proxy-5.1.0.dmg","url":"https://github.com/youzan/zan-proxy/releases/download/v5.1.0/Zan.Proxy-5.1.0.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v5.0.0 ships Zan.Proxy-5.0.0.dmg (237 downloads)","ref":"Zan.Proxy-5.0.0.dmg","url":"https://github.com/youzan/zan-proxy/releases/download/v5.0.0/Zan.Proxy-5.0.0.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v4.1.0 ships Zan.Proxy-4.1.0.dmg (559 downloads)","ref":"Zan.Proxy-4.1.0.dmg","url":"https://github.com/youzan/zan-proxy/releases/download/v4.1.0/Zan.Proxy-4.1.0.dmg","weight":0.0}],"data":{"signals":["binary-release-assets"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":2271.0,"function_nloc":6690.0,"mean_ccn":3.32,"p90_ccn":6.0,"complex_functions":68.0,"long_functions":0.0,"many_param_functions":0.0,"risky_nloc_share":0.013},"findings":[],"evidence":[{"kind":"complex-function","description":"r.prototype.resolveObject in docs/book/gitbook/gitbook.js: complexity 105, 1 lines","ref":"docs/book/gitbook/gitbook.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/gitbook.js#L4","weight":1.0},{"kind":"complex-function","description":"r.prototype.resolveObject in docs/book/gitbook/theme.js: complexity 105, 1 lines","ref":"docs/book/gitbook/theme.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/theme.js#L4","weight":1.0},{"kind":"complex-function","description":"r.prototype.parse in docs/book/gitbook/gitbook.js: complexity 65, 1 lines","ref":"docs/book/gitbook/gitbook.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/gitbook.js#L4","weight":1.0},{"kind":"complex-function","description":"r.prototype.parse in docs/book/gitbook/theme.js: complexity 65, 1 lines","ref":"docs/book/gitbook/theme.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/theme.js#L4","weight":1.0},{"kind":"complex-function","description":"(anonymous) in docs/book/gitbook/gitbook.js: complexity 61, 1 lines","ref":"docs/book/gitbook/gitbook.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/gitbook.js#L1","weight":1.0},{"kind":"complex-function","description":"(anonymous) in docs/book/gitbook/theme.js: complexity 61, 1 lines","ref":"docs/book/gitbook/theme.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/theme.js#L1","weight":1.0},{"kind":"complex-function","description":"trigger in docs/book/gitbook/gitbook.js: complexity 52, 1 lines","ref":"docs/book/gitbook/gitbook.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/gitbook.js#L3","weight":0.8666666666666667},{"kind":"complex-function","description":"trigger in docs/book/gitbook/theme.js: complexity 52, 1 lines","ref":"docs/book/gitbook/theme.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/theme.js#L3","weight":0.8666666666666667},{"kind":"complex-function","description":"(anonymous) in docs/book/gitbook/gitbook.js: complexity 49, 1 lines","ref":"docs/book/gitbook/gitbook.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/gitbook.js#L1","weight":0.8166666666666667},{"kind":"complex-function","description":"(anonymous) in docs/book/gitbook/theme.js: complexity 49, 1 lines","ref":"docs/book/gitbook/theme.js","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/docs/book/gitbook/theme.js#L1","weight":0.8166666666666667}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":7305.0,"duplicated_lines":144.0,"duplicated_share":0.0197,"files":176.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: src/gui/main/core/application.ts:121 and src/gui/main/core/application.ts:137","ref":"src/gui/main/core/application.ts","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/src/gui/main/core/application.ts#L121","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: webui/src/pages/manager/App.vue:59 and webui/src/pages/manager/pages/plugins/index.vue:14","ref":"webui/src/pages/manager/App.vue","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/webui/src/pages/manager/App.vue#L59","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: webui/src/pages/manager/pages/host/list.vue:19 and webui/src/pages/manager/pages/rule/list.vue:21","ref":"webui/src/pages/manager/pages/host/list.vue","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/webui/src/pages/manager/pages/host/list.vue#L19","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: webui/src/pages/manager/pages/host/list.vue:32 and webui/src/pages/manager/pages/profile/index.vue:23","ref":"webui/src/pages/manager/pages/host/list.vue","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/webui/src/pages/manager/pages/host/list.vue#L32","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: webui/src/pages/manager/pages/other-setting/index.vue:11 and webui/src/pages/manager/pages/rule/create.vue:14","ref":"webui/src/pages/manager/pages/other-setting/index.vue","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/webui/src/pages/manager/pages/other-setting/index.vue#L11","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: webui/src/pages/manager/pages/rule/rule-action.vue:53 and webui/src/pages/manager/pages/rule/rule-action.vue:72","ref":"webui/src/pages/manager/pages/rule/rule-action.vue","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/webui/src/pages/manager/pages/rule/rule-action.vue#L53","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: webui/src/pages/monitor/components/RecordDetail/BodyCollapseItem.vue:59 and webui/src/pages/monitor/components/RecordDetail/Response.vue:87","ref":"webui/src/pages/monitor/components/RecordDetail/BodyCollapseItem.vue","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/webui/src/pages/monitor/components/RecordDetail/BodyCollapseItem.vue#L59","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: webui/src/pages/monitor/components/RecordDetail/BodyCollapseItem.vue:63 and webui/src/pages/monitor/components/RecordDetail/Request.vue:146","ref":"webui/src/pages/monitor/components/RecordDetail/BodyCollapseItem.vue","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/webui/src/pages/monitor/components/RecordDetail/BodyCollapseItem.vue#L63","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: webui/src/pages/monitor/components/RecordDetail/Request.vue:41 and webui/src/pages/monitor/components/RecordDetail/Response.vue:14","ref":"webui/src/pages/monitor/components/RecordDetail/Request.vue","url":"https://github.com/youzan/zan-proxy/blob/d35dda17de5f04a0309c7bd17eb62cecc5b6b5d2/webui/src/pages/monitor/components/RecordDetail/Request.vue#L41","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":44.0,"weighted_findings":17.75,"scanned_lines":11738.0,"category:best-practice":8.0,"category:correctness":36.0},"findings":[{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"docs/book/gitbook/gitbook.js","line":4,"fingerprint":"javascript.lang.correctness.no-stringify-keys:docs/book/gitbook/gitbook.js:4"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-prompt","severity":"medium","message":"found prompt() call; should this be in production code?","path":"src/gui/main/managers/app-data/index.ts","line":150,"fingerprint":"javascript.lang.best-practice.javascript-prompt:src/gui/main/managers/app-data/index.ts:150"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-prompt","severity":"medium","message":"found prompt() call; should this be in production code?","path":"src/gui/main/managers/app-data/index.ts","line":171,"fingerprint":"javascript.lang.best-practice.javascript-prompt:src/gui/main/managers/app-data/index.ts:171"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/gui/renderer/components/workspace-editor/index.tsx","line":215,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/gui/renderer/components/workspace-editor/index.tsx:215"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/gui/renderer/components/workspace-editor/index.tsx","line":225,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/gui/renderer/components/workspace-editor/index.tsx:225"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/gui/renderer/components/workspace-editor/index.tsx","line":229,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/gui/renderer/components/workspace-editor/index.tsx:229"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/gui/renderer/components/workspace-editor/index.tsx","line":257,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/gui/renderer/components/workspace-editor/index.tsx:257"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/gui/renderer/components/workspace-editor/index.tsx","line":261,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/gui/renderer/components/workspace-editor/index.tsx:261"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/gui/renderer/main.tsx","line":21,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/gui/renderer/main.tsx:21"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":".build/gui/dev-client.js","line":13,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:.build/gui/dev-client.js:13"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":".build/gui/dev-client.js","line":13,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:.build/gui/dev-client.js:13"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`o` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`t` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`n` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`r` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`t` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`t` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`n` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":2,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:2"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`r` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":3,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:3"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`u` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":3,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:3"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":3,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:3"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`U` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":4,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:4"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`i` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/gitbook.js","line":4,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/gitbook.js:4"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`o` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`t` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`n` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`r` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`t` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`t` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`n` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":2,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:2"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`r` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":3,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:3"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`u` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":3,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:3"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`l` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":3,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:3"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`U` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":4,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:4"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`i` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":4,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:4"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`n` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":4,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:4"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"docs/book/gitbook/theme.js","line":4,"fingerprint":"javascript.lang.correctness.useless-assignment:docs/book/gitbook/theme.js:4"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/core/manager/controller/utils.ts","line":46,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/core/manager/controller/utils.ts:46"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/core/manager/controller/utils.ts","line":46,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/core/manager/controller/utils.ts:46"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/core/manager/controller/utils.ts","line":49,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/core/manager/controller/utils.ts:49"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/core/manager/controller/utils.ts","line":64,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/core/manager/controller/utils.ts:64"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/core/manager/controller/utils.ts","line":64,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/core/manager/controller/utils.ts:64"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/core/manager/controller/utils.ts","line":66,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/core/manager/controller/utils.ts:66"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/core/manager/controller/utils.ts","line":66,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/core/manager/controller/utils.ts:66"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.339,"test_lines":0.0,"source_lines":11738.0,"test_ratio":0.0,"ci_files":1.0,"cochange_share":0.0847,"cochange_commits":59.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .travis.yml","ref":".travis.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (npm run test)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["npm run test"],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":1.0,"readme_lines":70.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CHANGELOG.md","ref":"CHANGELOG.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":0.0,"escapes":39.0,"escapes_per_kloc":5.74},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: webui/tsconfig.json","ref":"webui/tsconfig.json","url":null,"weight":0.0}],"data":{},"error":null}],"flags":[]}