{"action":"opened","issue":{"url":"https://api.github.com/repos/jsreport/jsreport/issues/207","repository_url":"https://api.github.com/repos/jsreport/jsreport","labels_url":"https://api.github.com/repos/jsreport/jsreport/issues/207/labels{/name}","comments_url":"https://api.github.com/repos/jsreport/jsreport/issues/207/comments","events_url":"https://api.github.com/repos/jsreport/jsreport/issues/207/events","html_url":"https://github.com/jsreport/jsreport/issues/207","id":148420041,"number":207,"title":"JS-Report depending on insecure and/or outdated packages","user":{"login":"postama","id":10147635,"avatar_url":"https://avatars.githubusercontent.com/u/10147635?v=3","gravatar_id":"","url":"https://api.github.com/users/postama","html_url":"https://github.com/postama","followers_url":"https://api.github.com/users/postama/followers","following_url":"https://api.github.com/users/postama/following{/other_user}","gists_url":"https://api.github.com/users/postama/gists{/gist_id}","starred_url":"https://api.github.com/users/postama/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/postama/subscriptions","organizations_url":"https://api.github.com/users/postama/orgs","repos_url":"https://api.github.com/users/postama/repos","events_url":"https://api.github.com/users/postama/events{/privacy}","received_events_url":"https://api.github.com/users/postama/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-04-14T16:44:09Z","updated_at":"2016-04-14T16:44:09Z","closed_at":null,"body":"Following issues reported by snyk. It seems that many of them just require a dependency update\r\n\r\n✗ Low severity vulnerability found on hawk@2.3.1\r\n- desc: Regular Expression Denial of Service\r\n- info: https://snyk.io/vuln/npm:hawk:20160119\r\n- from: jsreport@0.13.4 > jsreport-core@0.6.3 > script-manager@0.5.4 > request@2.53.0 > hawk@2.3.1\r\n\r\n✗ Low severity vulnerability found on moment@2.10.6\r\n- desc: Regular Expression Denial of Service\r\n- info: https://snyk.io/vuln/npm:moment:20160126\r\n- from: jsreport@0.13.4 > jsreport-core@0.6.3 > moment@2.10.6\r\n\r\n✗ Low severity vulnerability found on moment@2.10.6\r\n- desc: Regular Expression Denial of Service\r\n- info: https://snyk.io/vuln/npm:moment:20160126\r\n- from: jsreport@0.13.4 > jsreport-scripts@0.5.2 > moment@2.10.6\r\n\r\n✗ Low severity vulnerability found on ms@0.6.2\r\n- desc: Regular Expression Denial of Service\r\n- info: https://snyk.io/vuln/npm:ms:20151024\r\n- from: jsreport@0.13.4 > jsreport-core@0.6.3 > reap@0.1.0 > ms@0.6.2\r\n\r\n✗ Low severity vulnerability found on ms@0.6.2\r\n- desc: Regular Expression Denial of Service\r\n- info: https://snyk.io/vuln/npm:ms:20151024\r\n- from: jsreport@0.13.4 > jsreport-fs-store@0.3.1 > socket.io@1.3.7 > debug@2.1.0 > ms@0.6.2\r\n\r\n✗ Low severity vulnerability found on ms@0.6.2\r\n- desc: Regular Expression Denial of Service\r\n- info: https://snyk.io/vuln/npm:ms:20151024\r\n- from: jsreport@0.13.4 > jsreport-fs-store@0.3.1 > socket.io@1.3.7 > socket.io-adapter@0.3.1 > debug@1.0.2 > ms@0.6.2\r\n\r\n✗ Low severity vulnerability found on ms@0.6.2\r\n- desc: Regular Expression Denial of Service\r\n- info: https://snyk.io/vuln/npm:ms:20151024\r\n- from: jsreport@0.13.4 > jsreport-fs-store@0.3.1 > socket.io@1.3.7 > engine.io@1.5.4 > debug@1.0.3 > ms@0.6.2\r\n\r\n✗ Low severity vulnerability found on ms@0.6.2\r\n- desc: Regular Expression Denial of Service\r\n- info: https://snyk.io/vuln/npm:ms:20151024\r\n- from: jsreport@0.13.4 > jsreport-fs-store@0.3.1 > socket.io@1.3.7 > socket.io-client@1.3.7 > engine.io-client@1.5.4 > debug@1.0.4 > ms@0.6.2\r\n\r\n✗ Medium severity vulnerability found on request@2.65.0\r\n- desc: Remote Memory Exposure\r\n- info: https://snyk.io/vuln/npm:request:20160119\r\n- from: jsreport@0.13.4 > jsreport-authorization@0.3.0 > request@2.65.0\r\n\r\n✗ Medium severity vulnerability found on request@2.65.0\r\n- desc: Remote Memory Exposure\r\n- info: https://snyk.io/vuln/npm:request:20160119\r\n- from: jsreport@0.13.4 > jsreport-xlsx@0.2.0 > request@2.65.0\r\n\r\n✗ Medium severity vulnerability found on request@2.53.0\r\n- desc: Remote Memory Exposure\r\n- info: https://snyk.io/vuln/npm:request:20160119\r\n- from: jsreport@0.13.4 > jsreport-core@0.6.3 > script-manager@0.5.4 > request@2.53.0\r\n\r\n✗ Low severity vulnerability found on uglify-js@2.4.24\r\n- desc: Regular Expression Denial of Service\r\n- info: https://snyk.io/vuln/npm:uglify-js:20151024\r\n- from: jsreport@0.13.4 > jsreport-handlebars@0.3.1 > handlebars@4.0.4 > uglify-js@2.4.24\r\n\r\n✗ High severity vulnerability found on ws@0.8.0\r\n- desc: Remote Memory Exposure\r\n- info: https://snyk.io/vuln/npm:ws:20160104\r\n- from: jsreport@0.13.4 > jsreport-fs-store@0.3.1 > socket.io@1.3.7 > engine.io@1.5.4 > ws@0.8.0\r\n\r\n✗ High severity vulnerability found on ws@0.8.0\r\n- desc: Remote Memory Exposure\r\n- info: https://snyk.io/vuln/npm:ws:20160104\r\n- from: jsreport@0.13.4 > jsreport-fs-store@0.3.1 > socket.io@1.3.7 > socket.io-client@1.3.7 > engine.io-client@1.5.4 > ws@0.8.0"}}