Last scanned: 4/26/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@babel/helpers: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@babel/runtime: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@eslint/plugin-kit: @eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@inquirer/editor: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@mapbox/node-pre-gyp: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@octokit/endpoint: @octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@octokit/plugin-paginate-rest: @octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@octokit/request: @octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@octokit/request-error: @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@octokit/rest: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@xmldom/xmldom: xmldom: Uncontrolled recursion in XML serialization leads to DoS",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "addons-linter: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "ajv: ajv has ReDoS when using `$data` option",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "basic-ftp: Basic FTP has Path Traversal Vulnerability in its downloadToDir() method",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "bn.js: bn.js affected by an infinite loop",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion Regular Expression Denial of Service vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "bumpp: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "c12: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "canvas: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "cipher-base: cipher-base is missing type checks, leading to hash rewind and passing on crafted data",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "compressing: Compressing Vulnerable to Arbitrary File Write via Symlink Extraction",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "defu: defu: Prototype pollution via `__proto__` key in defaults argument",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "elliptic: Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "epubjs: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "eslint: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "external-editor: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "form-data: form-data uses unsafe random function in form-data for choosing boundary",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "giget: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "glob: glob CLI: Command injection via -c/--cmd executes matches with shell:true",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "image-size: image-size Denial of Service via Infinite Loop during Image Processing",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "immutable: Immutable is vulnerable to Prototype Pollution",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "inquirer: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "lodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "nanoid: Predictable results in nanoid generation when given non-integer values",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "node-forge: node-forge has ASN.1 Unbounded Recursion",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "node-notifier: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "patch-package: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "pbkdf2: pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "pdfjs-dist: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "prismjs: PrismJS DOM Clobbering vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "react-mentions: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "react-syntax-highlighter: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "refractor: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "release-it: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "sha.js: sha.js is missing type checks leading to hash rewind and passing on crafted data",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tmp: tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "typeorm: TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "web-ext: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "zotero-plugin-scaffold: Vulnerability found",
      "severity": "high"
    }
  ],
  "status": "FAILED",
  "scannedAt": "2026-04-26T06:11:18.387Z",
  "semgrepRan": false,
  "npmAuditRan": true,
  "pipAuditRan": true
}