Last scanned: 5/24/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@aws-sdk/client-cognito-identity: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/client-sso: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/client-sso-oidc: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/client-sts: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-provider-cognito-identity: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-provider-ini: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-provider-node: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-provider-sso: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-providers: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/middleware-retry: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/token-providers: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@chat21/chat21-node-sdk: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@firebase/firestore: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@google-cloud/firestore: Logging of the firestore key within nodejs-firestore",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@google-cloud/storage: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@grpc/grpc-js: @grpc/grpc-js can allocate memory for incoming messages well above configured limits",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@grpc/proto-loader: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@messageformat/runtime: messageformat prototype pollution vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@protobufjs/utf8: protobufjs has overlong UTF-8 decoding",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk-ent/tiledesk-server-request-history: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk/helpcenter-query-client: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-apps: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-chat21-app: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-chatbot-client: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-chatbot-plugs: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-client: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-dialogflow-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-kaleyra-proxy: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-messenger-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-multi-worker: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-rasa-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-sms-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-telegram-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-tybot-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-voice-twilio-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-vxml-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-whatsapp-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-whatsapp-jobworker: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tootallnate/once: @tootallnate/once vulnerable to Incorrect Control Flow Scoping",
"severity": "low"
},
{
"type": "npm-audit",
"message": "actions-on-google: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "amqplib: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "axios: Axios vulnerable to Server-Side Request Forgery",
"severity": "high"
},
{
"type": "npm-audit",
"message": "body-parser: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion Regular Expression Denial of Service vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "braces: Uncontrolled resource consumption in braces",
"severity": "high"
},
{
"type": "npm-audit",
"message": "busboy: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "cachegoose: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "cacheman: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "cheerio: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "clean-css: Regular Expression Denial of Service in clean-css",
"severity": "low"
},
{
"type": "npm-audit",
"message": "constantinople: Sandbox Bypass Leading to Arbitrary Code Execution in constantinople",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "cookie: cookie accepts cookie name, path, and domain with out of bounds characters",
"severity": "low"
},
{
"type": "npm-audit",
"message": "cookie-parser: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "crypto-js: crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "css-select: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dialogflow: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dialogflow-fulfillment: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dicer: Crash in HeaderParser in dicer",
"severity": "high"
},
{
"type": "npm-audit",
"message": "diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
"severity": "low"
},
{
"type": "npm-audit",
"message": "dompurify: DOMPurify contains a Cross-site Scripting vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "downcache: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "download: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "email-templates: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "es5-ext: es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`",
"severity": "low"
},
{
"type": "npm-audit",
"message": "express: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "express-ipfilter: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "express-session: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "fast-xml-parser: fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "file-type: file-type vulnerable to Infinite Loop via malformed MKV file",
"severity": "high"
},
{
"type": "npm-audit",
"message": "firebase: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "firebase-admin: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "follow-redirects: Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects",
"severity": "high"
},
{
"type": "npm-audit",
"message": "form-data: form-data uses unsafe random function in form-data for choosing boundary",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "gcp-metadata: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "geoip-lite: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "get-func-name: Chaijs/get-func-name vulnerable to ReDoS",
"severity": "high"
},
{
"type": "npm-audit",
"message": "google-auth-library: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "google-gax: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "google-p12-pem: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "googleapis: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "googleapis-common: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "got: Got allows a redirect to a UNIX socket",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "gtoken: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "i18next-fs-backend: i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite",
"severity": "high"
},
{
"type": "npm-audit",
"message": "immutable: Immutable is vulnerable to Prototype Pollution",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ip: ip SSRF improper categorization in isPublic",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "jade: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "jose: jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "json-bigint: Uncontrolled Resource Consumption in json-bigint",
"severity": "high"
},
{
"type": "npm-audit",
"message": "jsonwebtoken: jsonwebtoken unrestricted key type could lead to legacy keys usage ",
"severity": "high"
},
{
"type": "npm-audit",
"message": "jws: auth0/node-jws Improperly Verifies HMAC Signature",
"severity": "high"
},
{
"type": "npm-audit",
"message": "liquidjs: liquidjs has a path traversal fallback vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "lodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
"severity": "high"
},
{
"type": "npm-audit",
"message": "lodash.pick: Prototype Pollution in lodash",
"severity": "high"
},
{
"type": "npm-audit",
"message": "mailparser: mailparser vulnerable to Cross-site Scripting",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "marked: Inefficient Regular Expression Complexity in marked",
"severity": "high"
},
{
"type": "npm-audit",
"message": "migrate-mongoose: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch ReDoS vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimist: Prototype Pollution in minimist",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "mkdirp: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "mocha: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "mongodb: MongoDB Driver may publish events containing authentication-related data",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "mongodb-runner: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "mongodb-tools: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "mongodb-version-list: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "mongodb-version-manager: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "mongoose: Mongoose Prototype Pollution vulnerability",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "morgan: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "ms: Vercel ms Inefficient Regular Expression Complexity vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "multer: Multer vulnerable to Denial of Service from maliciously crafted requests",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nanoid: Predictable results in nanoid generation when given non-integer values",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "node-forge: Prototype Pollution in node-forge debug API.",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nodemailer: nodemailer ReDoS when trying to send a specially crafted email",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nodemon: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nth-check: Inefficient Regular Expression Complexity in nth-check",
"severity": "high"
},
{
"type": "npm-audit",
"message": "on-headers: on-headers is vulnerable to http response header manipulation",
"severity": "low"
},
{
"type": "npm-audit",
"message": "passport: Passport vulnerable to session regeneration when a users logs in or out",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "preview-email: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "proto3-json-serializer: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "protobufjs: protobufjs Prototype Pollution vulnerability",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "pug: Pug allows JavaScript code execution if an application accepts untrusted input",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "pug-code-gen: Pug allows JavaScript code execution if an application accepts untrusted input",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "request: Server-Side Request Forgery in Request",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "request-promise: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "request-promise-core: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "semver: semver vulnerable to Regular Expression Denial of Service",
"severity": "high"
},
{
"type": "npm-audit",
"message": "serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()",
"severity": "high"
},
{
"type": "npm-audit",
"message": "sharp: sharp vulnerable to Command Injection in post-installation over build environment",
"severity": "high"
},
{
"type": "npm-audit",
"message": "simple-update-notifier: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "sitemapper: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "tar-fs: tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball",
"severity": "high"
},
{
"type": "npm-audit",
"message": "teeny-request: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "tough-cookie: tough-cookie Prototype Pollution vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "transformers: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "uglify-js: Regular Expression Denial of Service in uglify-js",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "underscore: Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack",
"severity": "high"
},
{
"type": "npm-audit",
"message": "url-parse: Authorization Bypass Through User-Controlled Key in url-parse",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "uuidv4: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "validator: validator.js has a URL validation bypass vulnerability in its isURL function",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vm2: vm2 Sandbox Escape vulnerability",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "word-wrap: word-wrap vulnerable to Regular Expression Denial of Service",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ws: ws affected by a DoS when handling a request with many HTTP headers",
"severity": "high"
},
{
"type": "npm-audit",
"message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "yargs: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "yargs-parser: yargs-parser Vulnerable to Prototype Pollution",
"severity": "medium"
}
],
"status": "FAILED",
"scannedAt": "2026-05-24T07:24:25.071Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}
