Bump @nx/storybook from 19.5.7 to 21.6.4 #4915
15 new security issues (0 max.).
Annotations
Check warning on line 4779 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L4779
Insecure dependency npm/@angular/core@6.1.10 (CVE-2021-4231: angular: XSS vulnerability) (update to 10.2.5)
Check warning on line 18230 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L18230
Insecure dependency npm/@babel/runtime@7.12.18 (CVE-2025-27789: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups) (update to 7.26.10)
Check warning on line 18788 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L18788
Insecure dependency npm/minimatch@3.0.4 (CVE-2022-3517: nodejs-minimatch: ReDoS via the braceExpand function) (update to 3.0.5)
Check warning on line 18980 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L18980
Insecure dependency npm/semver@7.3.4 (CVE-2022-25883: nodejs-semver: Regular expression denial of service) (update to 7.5.2)
Check warning on line 43138 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L43138
Insecure dependency npm/http-cache-semantics@3.8.1 (CVE-2022-25881: http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability) (update to 4.1.1)
Check notice on line 44543 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L44543
Insecure dependency npm/ip@1.1.5 (CVE-2023-42282: nodejs-ip: arbitrary code execution via the isPublic() function) (update to 1.1.9)
Check warning on line 44543 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L44543
Insecure dependency npm/ip@1.1.5 (CVE-2024-29415: node-ip: Incomplete fix for CVE-2023-42282) (no fix available)
Check failure on line 54014 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L54014
Insecure dependency npm/mockery@2.1.0 (CVE-2022-37614: mockery is vulnerable to prototype pollution) (no fix available)
Check warning on line 54065 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L54065
Insecure dependency npm/moment@2.29.1 (CVE-2022-24785: Moment.js: Path traversal in moment.locale) (update to 2.29.2)
Check warning on line 54065 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L54065
Insecure dependency npm/moment@2.29.1 (CVE-2022-31129: moment: inefficient parsing algorithm resulting in DoS) (update to 2.29.4)
Check warning on line 59785 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L59785
Insecure dependency npm/minimist@0.0.10 (CVE-2020-7598: nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload) (update to 0.2.1)
Check failure on line 59785 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L59785
Insecure dependency npm/minimist@0.0.10 (CVE-2021-44906: minimist: prototype pollution) (update to 0.2.4)
Check warning on line 65722 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L65722
Insecure dependency npm/ssh2@0.8.9 (CVE-2020-26301: nodejs-ssh2: Command injection by calling vulnerable method with untrusted input) (update to 1.4.0)
Check notice on line 70616 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L70616
Insecure dependency npm/utile@0.3.0 (NSWG-ECO-445: Out-of-bounds Read) (no fix available)
Check warning on line 71502 in package-lock.json
codacy-production / Codacy Static Code Analysis
package-lock.json#L71502
Insecure dependency npm/vue-template-compiler@2.6.12 (CVE-2024-6783: vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)) (update to 3.0.0)