initial commit

This commit is contained in:
dude
2026-09-01 18:33:56 +00:00
commit c24449ee0a
2761 changed files with 302737 additions and 0 deletions
@@ -0,0 +1 @@
{"source":1105443,"name":"brace-expansion","dependency":"brace-expansion","title":"brace-expansion Regular Expression Denial of Service vulnerability","url":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","severity":"low","versions":["0.0.0","1.0.0","1.0.1","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.1.10","1.1.11","1.1.12","2.0.0","2.0.1","2.0.2","3.0.0","3.0.1","4.0.0","4.0.1"],"vulnerableVersions":["1.0.0","1.0.1","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.1.10","1.1.11"],"cwe":["CWE-400"],"cvss":{"score":3.1,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"},"range":">=1.0.0 <=1.1.11","id":"7IQMvcVTr+svbh5KCx4Kl6FQKJ1GciM03BnJAve/5WYJjUeRzKAIrStVpfachbl3T6a7o8nYlQEVG6Ih0TNXRg=="}
@@ -0,0 +1 @@
{"source":"O+Ys/f4bZubU3jA9Sqz4HIIJaATwc83W201O653Eo/4y8FTwrgSc3mrXs4p8n7svj0OzipJYTBXXWJCgp81mSQ==","name":"morgan","dependency":"on-headers","title":"Depends on vulnerable versions of on-headers","url":null,"severity":"low","versions":["1.0.0","1.0.1","1.1.0","1.1.1","1.2.0","1.2.1","1.2.2","1.2.3","1.3.0","1.3.1","1.3.2","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.6.0","1.6.1","1.7.0","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.10.0","1.10.1"],"vulnerableVersions":["1.6.0","1.6.1","1.7.0","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.10.0"],"cwe":["CWE-241"],"cvss":{"score":3.4,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N"},"range":"1.6.0 - 1.10.0","id":"Zke8uLY8Kb+xhaCR8KBCtgvE9/pW8gqS8Wu7+yODR03h3RUJ3LkbQhW1UPJdzfNjaqwB7PsUxN02Mik4jHZypQ=="}
@@ -0,0 +1 @@
{"source":"O+Ys/f4bZubU3jA9Sqz4HIIJaATwc83W201O653Eo/4y8FTwrgSc3mrXs4p8n7svj0OzipJYTBXXWJCgp81mSQ==","name":"compression","dependency":"on-headers","title":"Depends on vulnerable versions of on-headers","url":null,"severity":"low","versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.0.10","1.0.11","1.1.0","1.1.1","1.1.2","1.2.0","1.2.1","1.2.2","1.3.0","1.3.1","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.5.0","1.5.1","1.5.2","1.6.0","1.6.1","1.6.2","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.8.0","1.8.1"],"vulnerableVersions":["1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.0.10","1.0.11","1.1.0","1.1.1","1.1.2","1.2.0","1.2.1","1.2.2","1.3.0","1.3.1","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.5.0","1.5.1","1.5.2","1.6.0","1.6.1","1.6.2","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.8.0"],"cwe":["CWE-241"],"cvss":{"score":3.4,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N"},"range":"1.0.3 - 1.8.0","id":"Huq7c89JK5BXQcE9DZw0MVDcGPHN59cP1la7rvM59DJxEu0MH2iAL2+Yj4XsVSVjaYaIYS5B6aMuaX1/Fn1QVQ=="}
@@ -0,0 +1 @@
{"source":1109538,"name":"form-data","dependency":"form-data","title":"form-data uses unsafe random function in form-data for choosing boundary","url":"https://github.com/advisories/GHSA-fjxv-7rqg-78g4","severity":"critical","versions":["0.0.0","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.8","0.0.9","0.0.10","0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.2.0","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.0","1.0.1","2.0.0","2.1.0","2.1.1","2.1.2","2.1.4","2.2.0","2.3.1","2.3.2-rc1","2.3.2","2.3.3","2.4.0","2.5.0","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","4.0.0","4.0.1","4.0.2","4.0.3","4.0.4","4.0.5"],"vulnerableVersions":["4.0.0","4.0.1","4.0.2","4.0.3"],"cwe":["CWE-330"],"cvss":{"score":0,"vectorString":null},"range":">=4.0.0 <4.0.4","id":"QHwSQK89tp8y8NaEB/BmWWPJbFRmcqxbWkKungy6gPoWDFe3Fp6pmP2eW7jh8ZiRT8rEqJsege91INZ02VqjRw=="}
@@ -0,0 +1 @@
{"name":"on-headers","dist-tags":{"latest":"1.1.0"},"versions":{"0.0.0":{"name":"on-headers","version":"0.0.0","devDependencies":{"mocha":"~1.18.2","supertest":"~0.12.1"},"dist":{"shasum":"ee2817f8344325785cd9c2df2b242bbc17caf4c4","tarball":"https://registry.npmjs.org/on-headers/-/on-headers-0.0.0.tgz","integrity":"sha512-sd6W+EIQTNDbMndkGZqf1q6x3PlMxAIoufoNhcfpvzrXhtN+IWVyM2sjdsZ3p+TVddtTG5u0lujTglZ+R1VGvQ==","signatures":[{"sig":"MEUCIEmpEBkrfa55armlt3iEGapT5WlKZbceUMpyDS3uth//AiEArFBEMQvppKjXV+E9HDh/fpZsA4kP7bdsX1xmdI2+KEw=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}]},"engines":{"node":">= 0.8.0"}},"1.0.0":{"name":"on-headers","version":"1.0.0","devDependencies":{"mocha":"~1.21.4","istanbul":"0.3.0","supertest":"~0.13.0"},"dist":{"shasum":"2c75b5da4375513d0161c6052e7fcbe4953fca5d","tarball":"https://registry.npmjs.org/on-headers/-/on-headers-1.0.0.tgz","integrity":"sha512-urnSdStWpm1wYfy2UrY26qO3HaBwuw55gNu9Xs17cPrfAxw3dhcedis1nWMPFKEyS3JfWasbUIVVl6q3y7fGVQ==","signatures":[{"sig":"MEQCICNnjh2xt6E3C9KM6v7Mwd9ffdkY5DPRPmyIHp7sXgMKAiADNkYBZ0oI8E7cG4I9fBQUiXl7xi7OdKPBZxWZfopsGg==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}]},"engines":{"node":">= 0.8.0"}},"1.0.1":{"name":"on-headers","version":"1.0.1","devDependencies":{"mocha":"2.3.3","istanbul":"0.3.21","supertest":"1.1.0"},"dist":{"shasum":"928f5d0f470d49342651ea6794b0857c100693f7","tarball":"https://registry.npmjs.org/on-headers/-/on-headers-1.0.1.tgz","integrity":"sha512-Hmfug855QMIrXA8SCoblfPRTzkGwAOMaSygo5hN2fC5Se2YJLJGPaC0wytTWMAplYipqVY9FZQLKGQjwqoYyqA==","signatures":[{"sig":"MEUCIDX2042N/kd+P0OYJb5NYiZoubb0uwYGchX8zyNVEfa3AiEA11AAqmj+a1joHSRGSWsNk2dnWXFtUcZk4t6hsorD0vw=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}]},"engines":{"node":">= 0.8"}},"1.0.2":{"name":"on-headers","version":"1.0.2","devDependencies":{"mocha":"6.0.1","eslint":"5.14.1","istanbul":"0.4.5","supertest":"3.4.2","eslint-plugin-node":"8.0.1","eslint-plugin-import":"2.16.0","eslint-plugin-promise":"4.0.1","eslint-config-standard":"12.0.0","eslint-plugin-markdown":"1.0.0","eslint-plugin-standard":"4.0.0"},"dist":{"shasum":"772b0ae6aaa525c399e489adfad90c403eb3c28f","tarball":"https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz","fileCount":5,"integrity":"sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA==","signatures":[{"sig":"MEUCIHNdro6AHu4OmFAiBhGZcziP8s0H0unZqjhbbXMzxH7vAiEAz8owPzIxW+nY/1NwAHn6bxecN7ErYVravcd0DOoC+0M=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":7538,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nBpKq\r\n=27fC\r\n-----END PGP SIGNATURE-----\r\n"},"engines":{"node":">= 0.8"}},"1.1.0":{"name":"on-headers","version":"1.1.0","devDependencies":{"eslint":"6.8.0","eslint-config-standard":"14.1.1","eslint-plugin-import":"2.21.2","eslint-plugin-markdown":"1.0.2","eslint-plugin-node":"11.1.0","eslint-plugin-promise":"4.2.1","eslint-plugin-standard":"4.0.1","mocha":"10.2.0","nyc":"15.1.0","supertest":"4.0.2"},"dist":{"integrity":"sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==","shasum":"59da4f91c45f5f989c6e4bcedc5a3b0aed70ff65","tarball":"https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz","fileCount":5,"unpackedSize":8850,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQCUVy2is5P4m0N3XB6teM1voZQw32BHfeSecrmPI3g9nwIhAOy9BKrr9XRi3X2nCi6bTF9emn8xiSsXYR0lCrXKJhMK"}]},"engines":{"node":">= 0.8"}}},"modified":"2025-07-17T15:41:31.899Z"}
@@ -0,0 +1 @@
{"source":"QHwSQK89tp8y8NaEB/BmWWPJbFRmcqxbWkKungy6gPoWDFe3Fp6pmP2eW7jh8ZiRT8rEqJsege91INZ02VqjRw==","name":"axios","dependency":"form-data","title":"Depends on vulnerable versions of form-data","url":null,"severity":"critical","versions":["0.1.0","0.2.0","0.2.1","0.2.2","0.3.0","0.3.1","0.4.0","0.4.1","0.4.2","0.5.0","0.5.1","0.5.2","0.5.3","0.5.4","0.6.0","0.7.0","0.8.0","0.8.1","0.9.0","0.9.1","0.10.0","0.11.0","0.11.1","0.12.0","0.13.0","0.13.1","0.14.0","0.15.0","0.15.1","0.15.2","0.15.3","0.16.0","0.16.1","0.16.2","0.17.0","0.17.1","0.18.0","0.18.1","0.19.0-beta.1","0.19.0","0.19.1","0.19.2","0.20.0-0","0.20.0","0.21.0","0.21.1","0.21.2","0.21.3","0.21.4","0.22.0","0.23.0","0.24.0","0.25.0","0.26.0","0.26.1","0.27.0","0.27.1","0.27.2","0.28.0","0.28.1","0.29.0","0.30.0","0.30.1","0.30.2","1.0.0-alpha.1","1.0.0","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0-alpha.1","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","1.3.6","1.4.0","1.5.0","1.5.1","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.7.0-beta.0","1.7.0-beta.1","1.7.0-beta.2","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7.9","1.8.0","1.8.1","1.8.2","1.8.3","1.8.4","1.9.0","1.10.0","1.11.0","1.12.0","1.12.1","1.12.2","1.13.0","1.13.1","1.13.2"],"vulnerableVersions":[],"cwe":["CWE-330"],"cvss":{"score":0,"vectorString":null},"range":"<0.0.0-0","id":"C2fIAmAB2uOvlfUuWl4nar/gbg/mmHzmzeMphxDBwRWYxDXxg8Ta1mzTq6jDIuRTZqkNY/kJ4g85IdHIaKaoPQ=="}

Some files were not shown because too many files have changed in this diff Show More