From c83c4dffa05beace3ab75aa9c050279296330f76 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 14 Aug 2025 07:47:28 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TMP-11501554 --- package-lock.json | 286 ++++++++++++---------------------------------- package.json | 2 +- 2 files changed, 75 insertions(+), 213 deletions(-) diff --git a/package-lock.json b/package-lock.json index de71ab1ab4f9..8ae0448cf16b 100644 --- a/package-lock.json +++ b/package-lock.json @@ -45,7 +45,7 @@ "core-js": "3.44.0", "form-data": "4.0.4", "https-proxy-agent": "7.0.6", - "inquirer": "8.2.6", + "inquirer": "^8.2.7", "jsdom": "26.1.0", "jszip": "3.10.1", "koa": "2.16.1", @@ -192,11 +192,13 @@ }, "apps/browser": { "name": "@bitwarden/browser", - "version": "2025.7.0" + "version": "2025.7.0", + "extraneous": true }, "apps/cli": { "name": "@bitwarden/cli", "version": "2025.7.0", + "extraneous": true, "license": "SEE LICENSE IN LICENSE.txt", "dependencies": { "@koa/multer": "4.0.0", @@ -235,60 +237,17 @@ "npm": "~10" } }, - "apps/cli/node_modules/define-lazy-prop": { - "version": "2.0.0", - "license": "MIT", - "engines": { - "node": ">=8" - } - }, - "apps/cli/node_modules/is-docker": { - "version": "2.2.1", - "license": "MIT", - "bin": { - "is-docker": "cli.js" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "apps/cli/node_modules/is-wsl": { - "version": "2.2.0", - "license": "MIT", - "dependencies": { - "is-docker": "^2.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "apps/cli/node_modules/open": { - "version": "8.4.2", - "license": "MIT", - "dependencies": { - "define-lazy-prop": "^2.0.0", - "is-docker": "^2.1.1", - "is-wsl": "^2.2.0" - }, - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, "apps/desktop": { "name": "@bitwarden/desktop", "version": "2025.7.0", + "extraneous": true, "hasInstallScript": true, "license": "GPL-3.0" }, "apps/desktop/desktop_native/napi": { "name": "@bitwarden/desktop-napi", "version": "0.1.0", + "extraneous": true, "license": "GPL-3.0", "devDependencies": { "@napi-rs/cli": "2.18.4" @@ -296,150 +255,180 @@ }, "apps/web": { "name": "@bitwarden/web-vault", - "version": "2025.7.2" + "version": "2025.7.2", + "extraneous": true }, "libs/admin-console": { "name": "@bitwarden/admin-console", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/angular": { "name": "@bitwarden/angular", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/auth": { "name": "@bitwarden/auth", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/billing": { "name": "@bitwarden/billing", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/common": { "name": "@bitwarden/common", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/components": { "name": "@bitwarden/components", - "version": "0.0.0" + "version": "0.0.0", + "extraneous": true }, "libs/dirt/card": { "name": "@bitwarden/dirt-card", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/importer": { "name": "@bitwarden/importer", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/key-management": { "name": "@bitwarden/key-management", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/key-management-ui": { "name": "@bitwarden/key-management-ui", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/logging": { "name": "@bitwarden/logging", "version": "0.0.1", + "extraneous": true, "license": "GPL-3.0" }, "libs/messaging": { "name": "@bitwarden/messaging", "version": "0.0.1", + "extraneous": true, "license": "GPL-3.0" }, "libs/messaging-internal": { "name": "@bitwarden/messaging-internal", "version": "0.0.1", + "extraneous": true, "license": "GPL-3.0" }, "libs/node": { "name": "@bitwarden/node", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/nx-plugin": { "name": "@bitwarden/nx-plugin", "version": "0.0.1", + "extraneous": true, "license": "GPL-3.0" }, "libs/platform": { "name": "@bitwarden/platform", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/storage-core": { "name": "@bitwarden/storage-core", "version": "0.0.1", + "extraneous": true, "license": "GPL-3.0" }, "libs/storage-test-utils": { "name": "@bitwarden/storage-test-utils", "version": "0.0.1", + "extraneous": true, "license": "GPL-3.0" }, "libs/tools/export/vault-export/vault-export-core": { "name": "@bitwarden/vault-export-core", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/tools/export/vault-export/vault-export-ui": { "name": "@bitwarden/vault-export-ui", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/tools/generator/components": { "name": "@bitwarden/generator-components", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/tools/generator/core": { "name": "@bitwarden/generator-core", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/tools/generator/extensions/history": { "name": "@bitwarden/generator-history", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/tools/generator/extensions/legacy": { "name": "@bitwarden/generator-legacy", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/tools/generator/extensions/navigation": { "name": "@bitwarden/generator-navigation", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/tools/send/send-ui": { "name": "@bitwarden/send-ui", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/ui/common": { "name": "@bitwarden/ui-common", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/user-core": { "name": "@bitwarden/user-core", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "libs/vault": { "name": "@bitwarden/vault", "version": "0.0.0", + "extraneous": true, "license": "GPL-3.0" }, "node_modules/@adobe/css-tools": { @@ -4521,106 +4510,6 @@ "integrity": "sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==", "license": "MIT" }, - "node_modules/@bitwarden/admin-console": { - "resolved": "libs/admin-console", - "link": true - }, - "node_modules/@bitwarden/angular": { - "resolved": "libs/angular", - "link": true - }, - "node_modules/@bitwarden/auth": { - "resolved": "libs/auth", - "link": true - }, - "node_modules/@bitwarden/billing": { - "resolved": "libs/billing", - "link": true - }, - "node_modules/@bitwarden/browser": { - "resolved": "apps/browser", - "link": true - }, - "node_modules/@bitwarden/cli": { - "resolved": "apps/cli", - "link": true - }, - "node_modules/@bitwarden/common": { - "resolved": "libs/common", - "link": true - }, - "node_modules/@bitwarden/components": { - "resolved": "libs/components", - "link": true - }, - "node_modules/@bitwarden/desktop": { - "resolved": "apps/desktop", - "link": true - }, - "node_modules/@bitwarden/desktop-napi": { - "resolved": "apps/desktop/desktop_native/napi", - "link": true - }, - "node_modules/@bitwarden/dirt-card": { - "resolved": "libs/dirt/card", - "link": true - }, - "node_modules/@bitwarden/generator-components": { - "resolved": "libs/tools/generator/components", - "link": true - }, - "node_modules/@bitwarden/generator-core": { - "resolved": "libs/tools/generator/core", - "link": true - }, - "node_modules/@bitwarden/generator-history": { - "resolved": "libs/tools/generator/extensions/history", - "link": true - }, - "node_modules/@bitwarden/generator-legacy": { - "resolved": "libs/tools/generator/extensions/legacy", - "link": true - }, - "node_modules/@bitwarden/generator-navigation": { - "resolved": "libs/tools/generator/extensions/navigation", - "link": true - }, - "node_modules/@bitwarden/importer": { - "resolved": "libs/importer", - "link": true - }, - "node_modules/@bitwarden/key-management": { - "resolved": "libs/key-management", - "link": true - }, - "node_modules/@bitwarden/key-management-ui": { - "resolved": "libs/key-management-ui", - "link": true - }, - "node_modules/@bitwarden/logging": { - "resolved": "libs/logging", - "link": true - }, - "node_modules/@bitwarden/messaging": { - "resolved": "libs/messaging", - "link": true - }, - "node_modules/@bitwarden/messaging-internal": { - "resolved": "libs/messaging-internal", - "link": true - }, - "node_modules/@bitwarden/node": { - "resolved": "libs/node", - "link": true - }, - "node_modules/@bitwarden/nx-plugin": { - "resolved": "libs/nx-plugin", - "link": true - }, - "node_modules/@bitwarden/platform": { - "resolved": "libs/platform", - "link": true - }, "node_modules/@bitwarden/sdk-internal": { "version": "0.2.0-main.237", "resolved": "https://registry.npmjs.org/@bitwarden/sdk-internal/-/sdk-internal-0.2.0-main.237.tgz", @@ -4642,42 +4531,6 @@ "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@bitwarden/send-ui": { - "resolved": "libs/tools/send/send-ui", - "link": true - }, - "node_modules/@bitwarden/storage-core": { - "resolved": "libs/storage-core", - "link": true - }, - "node_modules/@bitwarden/storage-test-utils": { - "resolved": "libs/storage-test-utils", - "link": true - }, - "node_modules/@bitwarden/ui-common": { - "resolved": "libs/ui/common", - "link": true - }, - "node_modules/@bitwarden/user-core": { - "resolved": "libs/user-core", - "link": true - }, - "node_modules/@bitwarden/vault": { - "resolved": "libs/vault", - "link": true - }, - "node_modules/@bitwarden/vault-export-core": { - "resolved": "libs/tools/export/vault-export/vault-export-core", - "link": true - }, - "node_modules/@bitwarden/vault-export-ui": { - "resolved": "libs/tools/export/vault-export/vault-export-ui", - "link": true - }, - "node_modules/@bitwarden/web-vault": { - "resolved": "apps/web", - "link": true - }, "node_modules/@braintree/asset-loader": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/@braintree/asset-loader/-/asset-loader-2.0.1.tgz", @@ -6914,6 +6767,33 @@ } } }, + "node_modules/@inquirer/external-editor": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/@inquirer/external-editor/-/external-editor-1.0.1.tgz", + "integrity": "sha512-Oau4yL24d2B5IL4ma4UpbQigkVhzPDXLoqy1ggK4gnHg/stmkffJE4oOXHXF3uz0UEpywG68KcyXsyYpA1Re/Q==", + "license": "MIT", + "dependencies": { + "chardet": "^2.1.0", + "iconv-lite": "^0.6.3" + }, + "engines": { + "node": ">=18" + }, + "peerDependencies": { + "@types/node": ">=18" + }, + "peerDependenciesMeta": { + "@types/node": { + "optional": true + } + } + }, + "node_modules/@inquirer/external-editor/node_modules/chardet": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/chardet/-/chardet-2.1.0.tgz", + "integrity": "sha512-bNFETTG/pM5ryzQ9Ad0lJOTa6HWD/YsScAR3EnCPZRPlQh77JocYktSHOUHelyhm8IARL+o4c4F1bP5KVOjiRA==", + "license": "MIT" + }, "node_modules/@inquirer/figures": { "version": "1.0.12", "resolved": "https://registry.npmjs.org/@inquirer/figures/-/figures-1.0.12.tgz", @@ -8290,23 +8170,6 @@ "win32" ] }, - "node_modules/@napi-rs/cli": { - "version": "2.18.4", - "resolved": "https://registry.npmjs.org/@napi-rs/cli/-/cli-2.18.4.tgz", - "integrity": "sha512-SgJeA4df9DE2iAEpr3M2H0OKl/yjtg1BnRI5/JyowS71tUWhrfSu2LT0V3vlHET+g1hBVlrO60PmEXwUEKp8Mg==", - "dev": true, - "license": "MIT", - "bin": { - "napi": "scripts/index.js" - }, - "engines": { - "node": ">= 10" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/Brooooooklyn" - } - }, "node_modules/@napi-rs/nice": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/@napi-rs/nice/-/nice-1.0.1.tgz", @@ -15856,12 +15719,6 @@ "integrity": "sha512-nfulgvOR6S4gt9UKCeGJOuSGBPGiFT6oQ/2UBnvTY/5aQ1PnksW72fhZkM30DzoRRv2WpwZf1vHHEr3mtuXIWQ==", "dev": true }, - "node_modules/browser-hrtime": { - "version": "1.1.8", - "resolved": "https://registry.npmjs.org/browser-hrtime/-/browser-hrtime-1.1.8.tgz", - "integrity": "sha512-kzXheikaJsBtzUBlyVtPIY5r0soQePzjwVwT4IlDpU2RvfB5Py52gpU98M77rgqMCheoSSZvrcrdj3t6cZ3suA==", - "license": "MIT" - }, "node_modules/browserslist": { "version": "4.23.2", "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.23.2.tgz", @@ -16577,6 +16434,7 @@ "version": "0.7.0", "resolved": "https://registry.npmjs.org/chardet/-/chardet-0.7.0.tgz", "integrity": "sha512-mT8iDcrh03qDGRRmoA2hmBJnxpllMR+0/0qlzjqZES6NdiWDcZkCNAk4rPFZ9Q85r27unkiNNg8ZOiwZXBHwcA==", + "dev": true, "license": "MIT" }, "node_modules/check-error": { @@ -20432,6 +20290,7 @@ "version": "3.1.0", "resolved": "https://registry.npmjs.org/external-editor/-/external-editor-3.1.0.tgz", "integrity": "sha512-hMQ4CX1p1izmuLYyZqLMO/qGNw10wSv9QDCPfzXfyFrOaCSSoRfqE1Kf1s5an66J5JZC62NewG+mK49jOCtQew==", + "dev": true, "license": "MIT", "dependencies": { "chardet": "^0.7.0", @@ -20446,6 +20305,7 @@ "version": "0.4.24", "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz", "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==", + "dev": true, "license": "MIT", "dependencies": { "safer-buffer": ">= 2.1.2 < 3" @@ -20458,6 +20318,7 @@ "version": "0.0.33", "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz", "integrity": "sha512-jRCJlojKnZ3addtTOjdIqoRuPEKBvNXcGYqzO6zWZX8KfKEpnGY5jfggJQ3EjKuu8D4bJRr0y+cYJFmYbImXGw==", + "dev": true, "license": "MIT", "dependencies": { "os-tmpdir": "~1.0.2" @@ -22849,16 +22710,16 @@ "license": "MIT" }, "node_modules/inquirer": { - "version": "8.2.6", - "resolved": "https://registry.npmjs.org/inquirer/-/inquirer-8.2.6.tgz", - "integrity": "sha512-M1WuAmb7pn9zdFRtQYk26ZBoY043Sse0wVDdk4Bppr+JOXyQYybdtvK+l9wUibhtjdjvtoiNy8tk+EgsYIUqKg==", + "version": "8.2.7", + "resolved": "https://registry.npmjs.org/inquirer/-/inquirer-8.2.7.tgz", + "integrity": "sha512-UjOaSel/iddGZJ5xP/Eixh6dY1XghiBw4XK13rCCIJcJfyhhoul/7KhLLUGtebEj6GDYM6Vnx/mVsjx2L/mFIA==", "license": "MIT", "dependencies": { + "@inquirer/external-editor": "^1.0.0", "ansi-escapes": "^4.2.1", "chalk": "^4.1.1", "cli-cursor": "^3.1.0", "cli-width": "^3.0.0", - "external-editor": "^3.0.3", "figures": "^3.0.0", "lodash": "^4.17.21", "mute-stream": "0.0.8", @@ -30895,6 +30756,7 @@ "version": "1.0.2", "resolved": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz", "integrity": "sha512-D2FR03Vir7FIu45XBY20mTb+/ZSWB00sjU9jdQXt83gDrI4Ztz5Fs7/yy74g2N5SVQY4xY1qDr4rNddwYRVX0g==", + "dev": true, "license": "MIT", "engines": { "node": ">=0.10.0" diff --git a/package.json b/package.json index b40ccd0a68bb..42b1f4373a55 100644 --- a/package.json +++ b/package.json @@ -180,7 +180,7 @@ "core-js": "3.44.0", "form-data": "4.0.4", "https-proxy-agent": "7.0.6", - "inquirer": "8.2.6", + "inquirer": "8.2.7", "jsdom": "26.1.0", "jszip": "3.10.1", "koa": "2.16.1",