Audit report

This audit fix resolves 4 of the total 41 vulnerabilities found in your project.

Updated dependencies

• @cypress/request
• body-parser
• express
• qs

Fixed vulnerabilities

@cypress/request #

• Caused by vulnerable dependency:
  • qs
• Affected versions: <=3.0.9
• Package usage:
  • node_modules/@cypress/request

body-parser #

• Caused by vulnerable dependency:
  • qs
• Affected versions: <=1.20.3 || 2.0.0-beta.1 - 2.0.2
• Package usage:
  • node_modules/body-parser

express #

• Caused by vulnerable dependency:
  • body-parser
  • qs
• Affected versions: 2.5.8 - 2.5.11 || 3.2.1 - 3.2.3 || 4.0.0-rc1 - 4.21.2 || 5.0.0-alpha.1 - 5.0.1
• Package usage:
  • node_modules/express

qs #

• qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
• Severity: high (CVSS 7.5)
• Reference: GHSA-6rw7-vpxm-498p
• Affected versions: <6.14.1
• Package usage:
  • node_modules/@cypress/request/node_modules/qs
  • node_modules/body-parser/node_modules/qs
  • node_modules/express/node_modules/qs
  • node_modules/qs