Hold on, we're currently generating a fresh version of this report

Generated on Jan 27, 2024 via pnpm

koa-middlewares 0.1.3

easy way to require some useful koa middlewares

Package summary

26

issues

2

licenses

Package created

25 Feb 2014

Version published

31 Mar 2014

Maintainers

1

Total deps

72

Direct deps

16

License

MIT

Issues

26

12 critical severity issues

ejs@0.8.5

ejs template injection vulnerability

Recommendation: Upgrade to version 3.1.7 or later

via: koa-ejs@0.0.3

ejs@0.8.5

ejs is vulnerable to remote code execution due to weak input validation

Recommendation: Upgrade to version 2.5.5 or later

via: koa-ejs@0.0.3

bytes@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-bodyparser@0.1.0 & others

debug@0.7.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-resource-router@0.3.3

debug@0.8.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-sess@0.3.3

debug@1.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-redis@0.1.1

ejs@0.8.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-ejs@0.0.3

humanize-number@0.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-logger@1.3.1

lingo@0.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-resource-router@0.3.3

path-to-regexp@0.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-resource-router@0.3.3

qs@0.6.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-bodyparser@0.1.0

redis@0.10.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-redis@0.1.1

10 high severity issues

qs@0.6.6

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: koa-bodyparser@0.1.0

qs@0.6.6

Denial-of-Service Extended Event Loop Blocking in qs

Recommendation: Upgrade to version 1.0.0 or later

via: koa-bodyparser@0.1.0

qs@0.6.6

Denial-of-Service Memory Exhaustion in qs

Recommendation: Upgrade to version 1.0.0 or later

via: koa-bodyparser@0.1.0

ejs@0.8.5

ejs vulnerable to DoS due to weak input validation

Recommendation: Upgrade to version 2.5.5 or later

via: koa-ejs@0.0.3

debug@1.0.5

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: koa-redis@0.1.1 & others

qs@0.6.6

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: koa-bodyparser@0.1.0

ejs@0.8.5

Deprecated package

via: koa-ejs@0.0.3

koa-csrf@1.1.1

Deprecated package

via: koa-csrf@1.1.1

koa-static-cache@1.2.0

Deprecated package

via: koa-static-cache@1.2.0

lingo@0.0.5

Deprecated package

via: koa-resource-router@0.3.3

4 moderate severity issues

ejs@0.8.5

mde ejs vulnerable to XSS

Recommendation: Upgrade to version 2.5.5 or later

via: koa-ejs@0.0.3

debug@1.0.5

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: koa-redis@0.1.1 & others

lingo@0.0.5

Package has no specified source code repository

via: koa-resource-router@0.3.3

path-to-regexp@0.0.2

Package has no specified source code repository

via: koa-resource-router@0.3.3

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

62 Packages, Including:

ansi-regex@2.1.1

ansi-styles@2.2.1

any-promise@1.3.0

buffer-crc32@0.2.13

bytes@2.5.0

chalk@1.1.3

clone@1.0.4

co-body@0.0.1

co-fs@1.1.1

co-redis@1.1.1

compressible@2.0.18

copy-to@1.0.1

core-util-is@1.0.1

debug@2.6.9

debug@3.2.7

debug@4.3.4

defaults@1.0.4

escape-string-regexp@1.0.5

fs-readdir-recursive@1.1.0

has-ansi@2.0.0

is-type-of@0.0.1

isarray@0.0.1

koa-bodyparser@0.1.0

koa-compose@2.2.0

koa-compose@2.5.1

koa-compress@1.0.9

koa-conditional-get@1.0.4

koa-csrf@1.1.1

koa-ejs@0.0.3

koa-etag@1.3.1

koa-favicon@1.2.1

koa-is-json@1.0.0

koa-jsonp@0.0.3

koa-logger@1.3.1

koa-middlewares@0.1.3

koa-redis@0.1.1

koa-resource-router@0.3.3

koa-rewrite@1.1.2

koa-router@3.8.0

koa-rt@0.0.2

koa-sess@0.3.3

koa-static-cache@1.2.0

methods@1.1.2

mime-db@1.12.0

mime-db@1.52.0

mime-types@2.0.14

ms@2.0.0

ms@2.1.2

ms@2.1.3

mz@2.7.0

N/A

N/A

10 Packages, Including:

bytes@1.0.0

debug@0.7.4

debug@0.8.1

debug@1.0.5

ejs@0.8.5

humanize-number@0.0.2

lingo@0.0.5

path-to-regexp@0.0.2

qs@0.6.6

redis@0.10.3

Direct Dependencies

16

All Dependencies CSV

ⓘ This is a list of koa-middlewares 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
koa-bodyparser	0.1.0	2.29 kB	MIT	prod	2 4
koa-compress	1.0.9	2.58 kB	MIT	prod
koa-conditional-get	1.0.4	1.14 kB	MIT	prod
koa-csrf	1.1.1	3.22 kB	MIT	prod	1
koa-ejs	0.0.3	3.2 kB	MIT	prod	3 2 1
koa-etag	1.3.1	1.31 kB	MIT	prod
koa-favicon	1.2.1	1.34 kB	MIT	prod
koa-jsonp	0.0.3	4.78 kB	MIT	prod
koa-logger	1.3.1	2.25 kB	MIT	prod	2
koa-redis	0.1.1	3.28 kB	MIT	prod	2 1 1
koa-resource-router	0.3.3	4.46 kB	MIT	prod	3 2 3
koa-rewrite	1.1.2	1.85 kB	MIT	prod
koa-router	3.8.0	9.11 kB	MIT	prod
koa-rt	0.0.2	984 B	MIT	prod
koa-sess	0.3.3	8.76 kB	MIT	prod	1 1 1
koa-static-cache	1.2.0	3.88 kB	MIT	prod	1

Recent Versions