Hold on, we're currently generating a fresh version of this report

Generated on Feb 25, 2024 via pnpm

sails-auth 1.2.4

Passport-based User Authentication system for sails.js applications.

Package summary

11

issues

2

licenses

Package created

12 Sep 2014

Version published

27 Jun 2015

Maintainers

2

Total deps

19

Direct deps

6

License

MIT

Issues

11

2 critical severity issues

xmldom@0.1.31

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: passport-twitter@1.0.4

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: sails-generate-entities@0.11.4 & others

4 high severity issues

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: sails-generate-entities@0.11.4 & others

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: sails-generate-entities@0.11.4 & others

lodash@3.10.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: sails-generate-entities@0.11.4 & others

xmldom@0.1.31

Deprecated package

via: passport-twitter@1.0.4

4 moderate severity issues

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: sails-generate-entities@0.11.4 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: passport-twitter@1.0.4

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: sails-generate-entities@0.11.4 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: None

via: passport-twitter@1.0.4

1 low severity issue

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: sails-generate-entities@0.11.4 & others

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

18 Packages, Including:

base64url@3.0.1

lodash@3.10.1

lodash@4.17.21

oauth@0.10.0

oauth@0.9.15

passport-facebook@1.0.3

passport-google-oauth@0.2.0

passport-oauth1@1.3.0

passport-oauth2@1.8.0

passport-oauth@1.0.0

passport-strategy@1.0.0

passport-twitter@1.0.4

pkginfo@0.3.1

sails-auth@1.2.4

sails-generate-entities@0.11.4

uid2@0.0.4

utils-merge@1.0.1

xtraverse@0.1.0

(LGPL-2.0 or MIT)

Permissive

1 Packages, Including:

xmldom@0.1.31

Direct Dependencies

6

All Dependencies CSV

ⓘ This is a list of sails-auth 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
lodash	3.10.1	169.48 kB	MIT	prod peer	1 3 2 1
lodash	4.17.21	311.49 kB	MIT	prod
passport-facebook	1.0.3	6.15 kB	MIT	prod optional
passport-google-oauth	0.2.0	4.96 kB	MIT	prod optional
passport-twitter	1.0.4	5.5 kB	MIT	prod optional	1 1 2
sails-generate-entities	0.11.4	3.18 kB	MIT	prod	1 3 2 1

Recent Versions