Path to dependency file: /package.json

Path to vulnerable library: /node_modules/ejs/package.json

Dependency Hierarchy:

-> webpack-cli-4.0.0.tgz (Root Library)

   -> init-1.1.3.tgz

     -> generators-1.3.1.tgz

       -> yeoman-environment-2.10.3.tgz

         -> mem-fs-editor-6.0.0.tgz

           -> ❌ ejs-2.7.4.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/ejs/package.json

Dependency Hierarchy:

-> webpack-cli-4.0.0.tgz (Root Library)

   -> init-1.1.3.tgz

     -> generators-1.3.1.tgz

       -> yeoman-environment-2.10.3.tgz

         -> mem-fs-editor-6.0.0.tgz

           -> ❌ ejs-2.7.4.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/cacache/node_modules/y18n/package.json

Dependency Hierarchy:

-> webpack-4.17.1.tgz (Root Library)

   -> uglifyjs-webpack-plugin-1.3.0.tgz

     -> cacache-10.0.4.tgz

       -> ❌ y18n-4.0.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/elliptic/package.json

Dependency Hierarchy:

-> webpack-4.17.1.tgz (Root Library)

   -> node-libs-browser-2.1.0.tgz

     -> crypto-browserify-3.12.0.tgz

       -> browserify-sign-4.0.4.tgz

         -> ❌ elliptic-6.4.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/color/node_modules/color-string/package.json

Dependency Hierarchy:

-> cssnano-4.1.0.tgz (Root Library)

   -> cssnano-preset-default-4.0.0.tgz

     -> postcss-colormin-4.0.1.tgz

       -> color-3.0.0.tgz

         -> ❌ color-string-1.5.3.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/body-parser/node_modules/qs/package.json

Dependency Hierarchy:

-> body-parser-1.18.3.tgz (Root Library)

   -> ❌ qs-6.5.2.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/pretty-format/node_modules/ansi-regex/package.json

Dependency Hierarchy:

-> lint-staged-7.2.2.tgz (Root Library)

   -> jest-validate-23.5.0.tgz

     -> pretty-format-23.5.0.tgz

       -> ❌ ansi-regex-3.0.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/is-svg/package.json

Dependency Hierarchy:

-> cssnano-4.1.0.tgz (Root Library)

   -> cssnano-preset-default-4.0.0.tgz

     -> postcss-svgo-4.0.0.tgz

       -> ❌ is-svg-3.0.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/is-svg/package.json

Dependency Hierarchy:

-> cssnano-4.1.0.tgz (Root Library)

   -> cssnano-preset-default-4.0.0.tgz

     -> postcss-svgo-4.0.0.tgz

       -> ❌ is-svg-3.0.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/ssri/package.json

Dependency Hierarchy:

-> webpack-4.17.1.tgz (Root Library)

   -> uglifyjs-webpack-plugin-1.3.0.tgz

     -> cacache-10.0.4.tgz

       -> ❌ ssri-5.3.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/postcss/package.json

Dependency Hierarchy:

-> css-loader-1.0.0.tgz (Root Library)

   -> ❌ postcss-6.0.23.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/postcss-loader/node_modules/postcss/package.json

Dependency Hierarchy:

-> postcss-loader-3.0.0.tgz (Root Library)

   -> ❌ postcss-7.0.2.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/underscore/package.json

Dependency Hierarchy:

-> sitemap-1.13.0.tgz (Root Library)

   -> ❌ underscore-1.7.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/elliptic/package.json

Dependency Hierarchy:

-> webpack-4.17.1.tgz (Root Library)

   -> node-libs-browser-2.1.0.tgz

     -> crypto-browserify-3.12.0.tgz

       -> browserify-sign-4.0.4.tgz

         -> ❌ elliptic-6.4.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/request/package.json

Dependency Hierarchy:

-> node-sass-6.0.1.tgz (Root Library)

   -> ❌ request-2.88.2.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/elliptic/package.json

Dependency Hierarchy:

-> webpack-4.17.1.tgz (Root Library)

   -> node-libs-browser-2.1.0.tgz

     -> crypto-browserify-3.12.0.tgz

       -> browserify-sign-4.0.4.tgz

         -> ❌ elliptic-6.4.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/elliptic/package.json

Dependency Hierarchy:

-> webpack-4.17.1.tgz (Root Library)

   -> node-libs-browser-2.1.0.tgz

     -> crypto-browserify-3.12.0.tgz

       -> browserify-sign-4.0.4.tgz

         -> ❌ elliptic-6.4.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/word-wrap/package.json

Dependency Hierarchy:

-> eslint-7.0.0.tgz (Root Library)

   -> optionator-0.9.1.tgz

     -> ❌ word-wrap-1.2.3.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/gh-got/node_modules/got/package.json

Dependency Hierarchy:

-> webpack-cli-4.0.0.tgz (Root Library)

   -> init-1.1.3.tgz

     -> generators-1.3.1.tgz

       -> yeoman-generator-4.13.0.tgz

         -> github-username-3.0.0.tgz

           -> gh-got-5.0.0.tgz

             -> ❌ got-6.7.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/@babel/helper-create-class-features-plugin/node_modules/semver/package.json,/node_modules/@babel/helper-compilation-targets/node_modules/semver/package.json,/node_modules/yeoman-generator/node_modules/make-dir/node_modules/semver/package.json,/node_modules/editions/node_modules/semver/package.json,/node_modules/@babel/core/node_modules/semver/package.json

Dependency Hierarchy:

-> webpack-cli-4.0.0.tgz (Root Library)

   -> init-1.1.3.tgz

     -> generators-1.3.1.tgz

       -> yeoman-generator-4.13.0.tgz

         -> istextorbinary-2.6.0.tgz

           -> editions-2.3.1.tgz

             -> ❌ semver-6.3.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/semver/package.json

Dependency Hierarchy:

-> babel-preset-env-1.7.0.tgz (Root Library)

   -> ❌ semver-5.5.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/@babel/register/node_modules/semver/package.json,/node_modules/yeoman-generator/node_modules/cross-spawn/node_modules/semver/package.json

Dependency Hierarchy:

-> webpack-cli-4.0.0.tgz (Root Library)

   -> init-1.1.3.tgz

     -> generators-1.3.1.tgz

       -> yeoman-generator-4.13.0.tgz

         -> cross-spawn-6.0.5.tgz

           -> ❌ semver-5.7.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/ws/package.json

Dependency Hierarchy:

-> ❌ ws-6.0.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/color/node_modules/color-string/package.json

Dependency Hierarchy:

-> cssnano-4.1.0.tgz (Root Library)

   -> cssnano-preset-default-4.0.0.tgz

     -> postcss-colormin-4.0.1.tgz

       -> color-3.0.0.tgz

         -> ❌ color-string-1.5.3.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/postcss-loader/node_modules/postcss/package.json

Dependency Hierarchy:

-> postcss-loader-3.0.0.tgz (Root Library)

   -> ❌ postcss-7.0.2.tgz (Vulnerable Library)