From 19d337609243c15d12f7e9f699afaf83a4fbc9dd Mon Sep 17 00:00:00 2001 From: Marcus Ho <99657446+MarcusHMCTS@users.noreply.github.com> Date: Mon, 27 Jan 2025 10:47:17 +0000 Subject: [PATCH] DTSPB-4537 suppress CVE for lodash.isequal: 4.5.0 (#2386) --- yarn-audit-known-issues | 1 + 1 file changed, 1 insertion(+) diff --git a/yarn-audit-known-issues b/yarn-audit-known-issues index e38b190eb5..822ed2e71c 100644 --- a/yarn-audit-known-issues +++ b/yarn-audit-known-issues @@ -4,6 +4,7 @@ {"value":"glob","children":{"ID":"glob (deprecation)","Issue":"Glob versions prior to v9 are no longer supported","Severity":"moderate","Vulnerable Versions":"7.2.3","Tree Versions":["7.2.3"],"Dependents":["shelljs@npm:0.8.5"]}} {"value":"har-validator","children":{"ID":"har-validator (deprecation)","Issue":"this library is no longer supported","Severity":"moderate","Vulnerable Versions":"5.1.5","Tree Versions":["5.1.5"],"Dependents":["request@npm:2.88.2"]}} {"value":"inflight","children":{"ID":"inflight (deprecation)","Issue":"This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.","Severity":"moderate","Vulnerable Versions":"1.0.6","Tree Versions":["1.0.6"],"Dependents":["glob@npm:7.2.3"]}} +{"value":"lodash.isequal","children":{"ID":"lodash.isequal (deprecation)","Issue":"This package is deprecated. Use require('node:util').isDeepStrictEqual instead.","Severity":"moderate","Vulnerable Versions":"4.5.0","Tree Versions":["4.5.0"],"Dependents":["expect-webdriverio@npm:4.12.2"]}} {"value":"request","children":{"ID":1096727,"Issue":"Server-Side Request Forgery in Request","URL":"https://github.com/advisories/GHSA-p8p7-x288-28g6","Severity":"moderate","Vulnerable Versions":"<=2.88.2","Tree Versions":["2.88.2"],"Dependents":["probate-frontend@workspace:."]}} {"value":"request-promise-native","children":{"ID":"request-promise-native (deprecation)","Issue":"request-promise-native has been deprecated because it extends the now deprecated request package, see https://github.com/request/request/issues/3142","Severity":"moderate","Vulnerable Versions":"1.0.9","Tree Versions":["1.0.9"],"Dependents":["@hmcts/os-places-client@npm:1.1.7"]}} {"value":"rimraf","children":{"ID":"rimraf (deprecation)","Issue":"Rimraf versions prior to v4 are no longer supported","Severity":"moderate","Vulnerable Versions":"2.7.1","Tree Versions":["2.7.1"],"Dependents":["fstream@npm:1.0.12"]}}