ct":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"cookie","packageVersion":"<0.7.0","severity":"low","title":"cookie accepts cookie name, path, and domain with out of bounds characters","advisoryUrl":"https://github.com/advisories/GHSA-pxg6-pf52-xh8x","ghsaId":"GHSA-pxg6-pf52-xh8x","cveId":null,"vulnerableRange":"<0.7.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":"light-my-request > cookie"},{"packageName":"cross-spawn","packageVersion":">=7.0.0 <7.0.5","severity":"high","title":"Regular Expression Denial of Service (ReDoS) in cross-spawn","advisoryUrl":"https://github.com/advisories/GHSA-3xgq-45jj-v275","ghsaId":"GHSA-3xgq-45jj-v275","cveId":null,"vulnerableRange":">=7.0.0 <7.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"fastify","packageVersion":"<=5.7.2","severity":"low","title":"Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream","advisoryUrl":"https://github.com/advisories/GHSA-mrq3-vjjr-p77c","ghsaId":"GHSA-mrq3-vjjr-p77c","cveId":null,"vulnerableRange":"<=5.7.2","fixAvailable":"5.8.4","source":"npm-audit","isDirect":true,"path":null},{"packageName":"fastify","packageVersion":"<5.7.2","severity":"high","title":"Fastify's Content-Type header tab character allows body validation bypass","advisoryUrl":"https://github.com/advisories/GHSA-jx2c-rxcm-jvmq","ghsaId":"GHSA-jx2c-rxcm-jvmq","cveId":null,"vulnerableRange":"<5.7.2","fixAvailable":"5.8.4","source":"npm-audit","isDirect":true,"path":null},{"packageName":"fastify","packageVersion":"<=5.8.2","severity":"moderate","title":"fastify: request.protocol and request.host Spoofable via X-Forwarded-Proto/Host from Untrusted Connections","advisoryUrl":"https://github.com/advisories/GHSA-444r-cwp2-x5xf","ghsaId":"GHSA-444r-cwp2-x5xf","cveId":null,"vulnerableRange":"<=5.8.2","fixAvailable":"5.8.4","source":"npm-audit","isDirect":true,"path":null},{"packageName":"find-my-way","packageVersion":">=5.5.0 <8.2.2","severity":"high","title":"find-my-way has a ReDoS vulnerability in multiparametric routes","advisoryUrl":"https://github.com/advisories/GHSA-rrr8-f88r-h8q6","ghsaId":"GHSA-rrr8-f88r-h8q6","cveId":null,"vulnerableRange":">=5.5.0 <8.2.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryUrl":"https://github.com/advisories/GHSA-mh29-5h37-fv8m","ghsaId":"GHSA-mh29-5h37-fv8m","cveId":null,"vulnerableRange":">=4.0.0 <4.1.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null}

ClipperMaster