0 critical · 0 high · 1 medium · 0 low · 1 total (deduped by advisory)
NPM package @datagrok/dev-tools@1.7.1 — production dependency tree audited with npm audit.
| Advisory | Severity | Dependency | Installed | Vulnerable range | Fixed by | CVSS | Description |
|---|---|---|---|---|---|---|---|
| GHSA-w5hq-g745-h8pq | MEDIUM | uuid | 8.3.2 | <11.1.1 | @datagrok-libraries/compute-api@0.2.0 | 7.5 | uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided |