# npm audit report

@babel/traverse  <7.23.2
Severity: critical
Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code - https://github.com/advisories/GHSA-67hx-6x53-jw92
fix available via `npm audit fix`
node_modules/@babel/traverse
node_modules/tap/node_modules/@babel/traverse

jose  3.0.0 - 4.15.4
Severity: moderate
jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext - https://github.com/advisories/GHSA-hhhv-q57g-882q
fix available via `npm audit fix --force`
Will install ut-run@10.67.0, which is a breaking change
node_modules/jose
  ut-bus  6.8.0-rc-godfather.0 - 7.11.3 || >=7.19.0
  Depends on vulnerable versions of jose
  Depends on vulnerable versions of lodash.set
  Depends on vulnerable versions of request
  node_modules/ut-bus
    ut-port  >=6.43.11
    Depends on vulnerable versions of ut-bus
    node_modules/ut-port
      ut-run  >=10.68.0-jose.0
      Depends on vulnerable versions of ut-bus
      Depends on vulnerable versions of ut-port
      node_modules/ut-run

lodash.set  *
Severity: high
Prototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gw
fix available via `npm audit fix --force`
Will install ut-run@10.67.0, which is a breaking change
node_modules/lodash.set

react-devtools-core  <4.28.4
Severity: moderate
React Developer Tools extension Improper Authorization vulnerability - https://github.com/advisories/GHSA-rxrc-rgv4-jpvx
fix available via `npm audit fix`
node_modules/tap/node_modules/react-devtools-core

request  *
Severity: moderate
Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6
Depends on vulnerable versions of tough-cookie
fix available via `npm audit fix --force`
Will install ut-run@10.67.0, which is a breaking change
node_modules/request

tough-cookie  <4.1.3
Severity: moderate
tough-cookie Prototype Pollution vulnerability - https://github.com/advisories/GHSA-72xf-g2v4-qvf3
fix available via `npm audit fix --force`
Will install ut-run@10.67.0, which is a breaking change
node_modules/tough-cookie

9 vulnerabilities (6 moderate, 2 high, 1 critical)

To address issues that do not require attention, run:
  npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix --force