{"action":"created","issue":{"url":"https://api.github.com/repos/nodesecurity/gulp-nsp/issues/43","repository_url":"https://api.github.com/repos/nodesecurity/gulp-nsp","labels_url":"https://api.github.com/repos/nodesecurity/gulp-nsp/issues/43/labels{/name}","comments_url":"https://api.github.com/repos/nodesecurity/gulp-nsp/issues/43/comments","events_url":"https://api.github.com/repos/nodesecurity/gulp-nsp/issues/43/events","html_url":"https://github.com/nodesecurity/gulp-nsp/issues/43","id":297603076,"number":43,"title":"gulp-nsp 3.0 ignoring exceptions","user":{"login":"nathany","id":4566,"avatar_url":"https://avatars1.githubusercontent.com/u/4566?v=4","gravatar_id":"","url":"https://api.github.com/users/nathany","html_url":"https://github.com/nathany","followers_url":"https://api.github.com/users/nathany/followers","following_url":"https://api.github.com/users/nathany/following{/other_user}","gists_url":"https://api.github.com/users/nathany/gists{/gist_id}","starred_url":"https://api.github.com/users/nathany/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nathany/subscriptions","organizations_url":"https://api.github.com/users/nathany/orgs","repos_url":"https://api.github.com/users/nathany/repos","events_url":"https://api.github.com/users/nathany/events{/privacy}","received_events_url":"https://api.github.com/users/nathany/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-02-15T21:30:10Z","updated_at":"2018-02-15T22:11:23Z","closed_at":"2018-02-15T22:10:40Z","author_association":"NONE","body":"@nlf Thanks for releasing 3.0  to resolve this issue: https://github.com/nodesecurity/gulp-nsp/issues/39#issuecomment-366010196. \r\n\r\nUnfortunately I'm running into some issues after upgrading our project to 3.0.\r\n\r\nI'm now seeing `gulp nsp` output vulnerability warnings that are in the exceptions list.\r\n\r\n.nsprc\r\n```json\r\n{\r\n  \"exceptions\": [\r\n    \"https://nodesecurity.io/advisories/534\",\r\n    \"https://nodesecurity.io/advisories/566\"\r\n  ]\r\n}\r\n```\r\n\r\n```\r\n┌────────────┬────────────────────────────────────────────────────────────────────┐\r\n│            │ Regular Expression Denial of Service                               │\r\n├────────────┼────────────────────────────────────────────────────────────────────┤\r\n│ Name       │ debug                                                              │\r\n├────────────┼────────────────────────────────────────────────────────────────────┤\r\n│ CVSS       │ 3.7 (Low)                                                          │\r\n├────────────┼────────────────────────────────────────────────────────────────────┤\r\n│ Installed  │ 0.7.4                                                              │\r\n├────────────┼────────────────────────────────────────────────────────────────────┤\r\n│ Vulnerable │ <= 2.6.8 || >= 3.0.0 <= 3.0.1                                      │\r\n├────────────┼────────────────────────────────────────────────────────────────────┤\r\n│ Patched    │ >= 2.6.9 < 3.0.0 || >= 3.1.0                                       │\r\n├────────────┼────────────────────────────────────────────────────────────────────┤\r\n│ Path       │ my-project@0.0.1 > tcp-port-used@0.1.2 > debug@0.7.4               │\r\n├────────────┼────────────────────────────────────────────────────────────────────┤\r\n│ More Info  │ https://nodesecurity.io/advisories/534                             │\r\n└────────────┴────────────────────────────────────────────────────────────────────┘\r\n```\r\n\r\nThis issue: https://github.com/stdarg/tcp-port-used/pull/5\r\n\r\nI'm also not seeing the other 566 vulnerability if I remove the .nsprc file.  https://github.com/mapbox/node-pre-gyp/issues/346\r\n\r\nIf I downgrade gulp-nsp, I see both vulnerabilities when there is no .nsprc file, and they both can be ignored with the .nsprc.\r\n\r\nThis is the output from gulp-nsp 2.x:\r\n\r\n```\r\n hoek    2.16.3      > 4.2.0 < 5.0.0 || >= 5.0.3    my-project@0.0.1 > gulp@4.0.0 > glob-watcher@5.0.1 > chokidar@2.0.2 > fsevents@1.1.3 > node-pre-gyp@0.6.39 > hawk@3.1.3 > hoek@2.16.3   https://nodesecurity.io/advisories/566 \r\n debug   0.7.4       >= 2.6.9 < 3.0.0 || >= 3.1.0   my-project@0.0.1 > tcp-port-used@0.1.2 > debug@0.7.4                                                                                    https://nodesecurity.io/advisories/534 \r\n```\r\n\r\nAlso noticed a Drone test failure on your repo.\r\n"},"comment":{"url":"https://api.github.com/repos/nodesecurity/gulp-nsp/issues/comments/366078723","html_url":"https://github.com/nodesecurity/gulp-nsp/issues/43#issuecomment-366078723","issue_url":"https://api.github.com/repos/nodesecurity/gulp-nsp/issues/43","id":366078723,"user":{"login":"nlf","id":424045,"avatar_url":"https://avatars3.githubusercontent.com/u/424045?v=4","gravatar_id":"","url":"https://api.github.com/users/nlf","html_url":"https://github.com/nlf","followers_url":"https://api.github.com/users/nlf/followers","following_url":"https://api.github.com/users/nlf/following{/other_user}","gists_url":"https://api.github.com/users/nlf/gists{/gist_id}","starred_url":"https://api.github.com/users/nlf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nlf/subscriptions","organizations_url":"https://api.github.com/users/nlf/orgs","repos_url":"https://api.github.com/users/nlf/repos","events_url":"https://api.github.com/users/nlf/events{/privacy}","received_events_url":"https://api.github.com/users/nlf/received_events","type":"User","site_admin":false},"created_at":"2018-02-15T22:11:23Z","updated_at":"2018-02-15T22:11:23Z","author_association":"OWNER","body":"happy to help, good catch on the exceptions not working and thank you for reporting it so quickly!"}}
{"actor":{"display_login":"nlf"}}