0 critical · 1 high · 1 medium · 0 low · 2 total (deduped by advisory)
NPM package @datagrok/phylo-tree-viewer@1.4.0 — production dependency tree audited with npm audit.
| Advisory | Severity | Dependency | Installed | Vulnerable range | Fixed by | CVSS | Description |
|---|---|---|---|---|---|---|---|
| GHSA-36jr-mh4h-2g58 | HIGH | d3-color | 2.0.0 | <3.1.0 | deck.gl@8.9.36 | d3-color vulnerable to ReDoS | |
| GHSA-w5hq-g745-h8pq | MEDIUM | uuid | 9.0.1 | <11.1.1 | @datagrok-libraries/bio@5.39.9 | 7.5 | uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided |