verity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.0.5","severity":"high","title":"minimatch ReDoS vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-f8q6-p94x-37v3","ghsaId":"GHSA-f8q6-p94x-37v3","cveId":null,"vulnerableRange":"<3.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern","advisoryUrl":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","ghsaId":"GHSA-3ppc-4f35-3m26","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments","advisoryUrl":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","ghsaId":"GHSA-7r86-cg39-jmmj","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.4","severity":"high","title":"minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions","advisoryUrl":"https://github.com/advisories/GHSA-23c5-xmqv-rm74","ghsaId":"GHSA-23c5-xmqv-rm74","cveId":null,"vulnerableRange":"<3.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"moment","packageVersion":"<2.29.2","severity":"high","title":"Path Traversal: 'dir/../../filename' in moment.locale","advisoryUrl":"https://github.com/advisories/GHSA-8hfj-j24r-96c4","ghsaId":"GHSA-8hfj-j24r-96c4","cveId":null,"vulnerableRange":"<2.29.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"moment","packageVersion":">=2.18.0 <2.29.4","severity":"high","title":"Moment.js vulnerable to Inefficient Regular Expression Complexity","advisoryUrl":"https://github.com/advisories/GHSA-wc69-rhjr-hc9g","ghsaId":"GHSA-wc69-rhjr-hc9g","cveId":null,"vulnerableRange":">=2.18.0 <2.29.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://github.com/advisories/GHSA-3v7f-55p6-f55p","ghsaId":"GHSA-3v7f-55p6-f55p","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"high","title":"Picomatch has a ReDoS vulnerability via extglob quantifiers","advisoryUrl":"https://github.com/advisories/GHSA-c2c7-rcm5-vvqj","ghsaId":"GHSA-c2c7-rcm5-vvqj","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"rollup","packageVersion":"<2.79.2","severity":"high","title":"DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS","advisoryUrl":"https://github.com/advisories/GHSA-gcx4-mw62-g8wm","ghsaId":"GHSA-gcx4-mw62-g8wm","cveId":null,"vulnerableRange":"<2.79.2","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"rollup","packageVersion":"<2.80.0","severity":"high","title":"Rollup 4 has Arbitrary File Write via Path Traversal","advisoryUrl":"https://github.com/advisories/GHSA-mw96-cpmx-2vgc","ghsaId":"GHSA-mw96-cpmx-2vgc","cveId":null,"vulnerableRange":"<2.80.0","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":8,"directDeps":0,"transitiveDeps":0}}]]}]

Code block from selection