Vulnerabilities

DepShield reports that this application's usage of kind-of:6.0.2 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2019-20149] ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite c...
• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:6.0.2 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ react-dev-utils:9.0.0
              └─ global-modules:2.0.0
                    └─ global-prefix:3.0.0
                          └─ kind-of:6.0.2
        └─ sass-loader:7.1.0
              └─ clone-deep:2.0.2
                    └─ kind-of:6.0.2
        └─ webpack:4.29.6
              └─ micromatch:3.1.10
                    └─ braces:2.3.2
                          └─ snapdragon-node:2.1.1
                                └─ define-property:1.0.0
                                      └─ is-descriptor:1.0.2
                                            └─ is-accessor-descriptor:1.0.0
                                                  └─ kind-of:6.0.2
                                            └─ is-data-descriptor:1.0.0
                                                  └─ kind-of:6.0.2
                                            └─ kind-of:6.0.2
                    └─ define-property:2.0.2
                          └─ is-descriptor:1.0.2
                                └─ is-accessor-descriptor:1.0.0
                                      └─ kind-of:6.0.2
                                └─ is-data-descriptor:1.0.0
                                      └─ kind-of:6.0.2
                                └─ kind-of:6.0.2
                    └─ extglob:2.0.4
                          └─ define-property:1.0.0
                                └─ is-descriptor:1.0.2
                                      └─ is-accessor-descriptor:1.0.0
                                            └─ kind-of:6.0.2
                                      └─ is-data-descriptor:1.0.0
                                            └─ kind-of:6.0.2
                                      └─ kind-of:6.0.2
                    └─ kind-of:6.0.2
                    └─ nanomatch:1.2.13
                          └─ kind-of:6.0.2
                    └─ snapdragon:0.8.2
                          └─ base:0.11.2
                                └─ define-property:1.0.0
                                      └─ is-descriptor:1.0.2
                                            └─ is-accessor-descriptor:1.0.0
                                                  └─ kind-of:6.0.2
                                            └─ is-data-descriptor:1.0.0
                                                  └─ kind-of:6.0.2
                                            └─ kind-of:6.0.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of kind-of:5.1.0 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:5.1.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ sass-loader:7.1.0
              └─ clone-deep:2.0.2
                    └─ shallow-clone:1.0.0
                          └─ kind-of:5.1.0
        └─ webpack:4.29.6
              └─ micromatch:3.1.10
                    └─ snapdragon:0.8.2
                          └─ define-property:0.2.5
                                └─ is-descriptor:0.1.6
                                      └─ kind-of:5.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash:4.17.11 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2019-10744] Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The...
• (CVSS 9.6) CWE-506: Embedded Malicious Code

---

Occurrences

lodash:4.17.11 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ @babel/core:7.4.3
              └─ @babel/generator:7.4.0
                    └─ lodash:4.17.11
              └─ @babel/traverse:7.4.3
                    └─ lodash:4.17.11
              └─ @babel/types:7.4.0
                    └─ lodash:4.17.11
              └─ lodash:4.17.11
        └─ @svgr/webpack:4.1.0
              └─ @babel/preset-env:7.4.3
                    └─ @babel/plugin-proposal-unicode-property-regex:7.4.0
                          └─ @babel/helper-regex:7.4.3
                                └─ lodash:4.17.11
                    └─ @babel/plugin-transform-block-scoping:7.4.0
                          └─ lodash:4.17.11
                    └─ @babel/plugin-transform-modules-amd:7.2.0
                          └─ @babel/helper-module-transforms:7.4.3
                                └─ lodash:4.17.11
        └─ babel-preset-react-app:8.0.0
              └─ @babel/plugin-transform-classes:7.4.3
                    └─ @babel/helper-define-map:7.4.0
                          └─ lodash:4.17.11
        └─ eslint:5.16.0
              └─ inquirer:6.3.1
                    └─ lodash:4.17.11
              └─ lodash:4.17.11
              └─ table:5.2.3
                    └─ lodash:4.17.11
        └─ eslint-plugin-flowtype:2.50.1
              └─ lodash:4.17.11
        └─ eslint-plugin-import:2.16.0
              └─ lodash:4.17.11
        └─ html-webpack-plugin:4.0.0-beta.5
              └─ lodash:4.17.11
        └─ jest:24.7.1
              └─ jest-cli:24.7.1
                    └─ @jest/core:24.7.1
                          └─ @jest/reporters:24.7.1
                                └─ istanbul-api:2.1.5
                                      └─ async:2.6.2
                                            └─ lodash:4.17.11
        └─ jest-environment-jsdom-fourteen:0.1.0
              └─ jsdom:14.1.0
                    └─ request-promise-native:1.0.7
                          └─ request-promise-core:1.1.2
                                └─ lodash:4.17.11
        └─ optimize-css-assets-webpack-plugin:5.0.1
              └─ last-call-webpack-plugin:3.0.0
                    └─ lodash:4.17.11
        └─ react-dev-utils:9.0.0
              └─ inquirer:6.2.2
                    └─ lodash:4.17.11
        └─ webpack-dev-server:3.2.1
              └─ http-proxy-middleware:0.19.1
                    └─ lodash:4.17.11
        └─ webpack-manifest-plugin:2.0.4
              └─ lodash:4.17.11

• redux-promise:0.6.0
        └─ flux-standard-action:2.0.3
              └─ lodash:4.17.11

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.isarray:3.0.4 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isarray:3.0.4 is a transitive dependency introduced by the following direct dependency(s):

• redux-promise:0.5.3
        └─ flux-standard-action:0.6.1
              └─ lodash.isplainobject:3.2.0
                    └─ lodash.keysin:3.0.8
                          └─ lodash.isarray:3.0.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of yargs-parser:11.1.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
• (CVSS 7.5) [CVE-2020-7608] yargs-parser could be tricked into adding or modifying properties of Object.prot...

---

Occurrences

yargs-parser:11.1.1 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ jest:24.7.1
              └─ jest-cli:24.7.1
                    └─ yargs:12.0.5
                          └─ yargs-parser:11.1.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

🚨 You need to enable Continuous Integration on Greenkeeper branches of this repository. 🚨

To enable Greenkeeper, you need to make sure that a commit status is reported on all branches. This is required by Greenkeeper because it uses your CI build statuses to figure out when to notify you about breaking changes.

Since we didn’t receive a CI status on the greenkeeper/initial branch, it’s possible that you don’t have CI set up yet. We recommend using Travis CI, but Greenkeeper will work with every other CI service as well.

If you have already set up a CI for this repository, you might need to check how it’s configured. Make sure it is set to run on all new branches. If you don’t want it to run on absolutely every branch, you can whitelist branches starting with greenkeeper/.

Once you have installed and configured CI on this repository correctly, you’ll need to re-trigger Greenkeeper’s initial pull request. To do this, please click the 'fix repo' button on account.greenkeeper.io.

Vulnerabilities

DepShield reports that this application's usage of acorn:5.7.4 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

acorn:5.7.4 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ jest:24.7.1
              └─ jest-cli:24.7.1
                    └─ jest-config:24.7.1
                          └─ jest-environment-jsdom:24.7.1
                                └─ jsdom:11.12.0
                                      └─ acorn:5.7.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.memoize:4.1.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.memoize:4.1.2 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:1.1.5
        └─ css-loader:0.28.7
              └─ cssnano:3.10.0
                    └─ postcss-merge-rules:2.1.2
                          └─ caniuse-api:1.6.1
                                └─ lodash.memoize:4.1.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._reinterpolate:3.0.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._reinterpolate:3.0.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:1.1.5
        └─ sw-precache-webpack-plugin:0.11.4
              └─ sw-precache:5.2.1
                    └─ lodash.template:4.4.0
                          └─ lodash._reinterpolate:3.0.0
                          └─ lodash.templatesettings:4.1.0
                                └─ lodash._reinterpolate:3.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of browserslist:4.5.5 results in the following vulnerability(s):

• (CVSS 5.3) [CVE-2021-23364] The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular ...

---

Occurrences

browserslist:4.5.5 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ @svgr/webpack:4.1.0
              └─ @babel/preset-env:7.4.3
                    └─ browserslist:4.5.5
                    └─ core-js-compat:3.0.1
                          └─ browserslist:4.5.5
        └─ optimize-css-assets-webpack-plugin:5.0.1
              └─ cssnano:4.1.10
                    └─ cssnano-preset-default:4.0.7
                          └─ postcss-colormin:4.0.3
                                └─ browserslist:4.5.5
                          └─ postcss-merge-longhand:4.0.11
                                └─ stylehacks:4.0.3
                                      └─ browserslist:4.5.5
                          └─ postcss-merge-rules:4.0.3
                                └─ browserslist:4.5.5
                                └─ caniuse-api:3.0.0
                                      └─ browserslist:4.5.5
                          └─ postcss-minify-params:4.0.2
                                └─ browserslist:4.5.5
                          └─ postcss-normalize-unicode:4.0.1
                                └─ browserslist:4.5.5
                          └─ postcss-reduce-initial:4.0.3
                                └─ browserslist:4.5.5
        └─ postcss-normalize:7.0.1
              └─ browserslist:4.5.5
        └─ postcss-preset-env:6.6.0
              └─ autoprefixer:9.5.1
                    └─ browserslist:4.5.5
              └─ browserslist:4.5.5

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of acorn:6.4.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

acorn:6.4.1 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ eslint:5.16.0
              └─ espree:5.0.1
                    └─ acorn:6.4.1
        └─ jest-environment-jsdom-fourteen:0.1.0
              └─ jsdom:14.1.0
                    └─ acorn:6.4.1
                    └─ acorn-globals:4.3.2
                          └─ acorn:6.4.1
        └─ webpack:4.29.6
              └─ acorn:6.4.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of serialize-javascript:1.7.0 results in the following vulnerability(s):

• (CVSS 6.1) CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

---

Occurrences

serialize-javascript:1.7.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ terser-webpack-plugin:1.2.3
              └─ serialize-javascript:1.7.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of browserslist:4.5.4 results in the following vulnerability(s):

• (CVSS 5.3) [CVE-2021-23364] The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular ...

---

Occurrences

browserslist:4.5.4 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ react-dev-utils:9.0.0
              └─ browserslist:4.5.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.camelcase:4.3.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.camelcase:4.3.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:2.1.3
        └─ css-loader:1.0.0
              └─ lodash.camelcase:4.3.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ eslint-plugin-import:2.16.0
              └─ eslint-import-resolver-node:0.3.2
                    └─ debug:2.6.9
              └─ eslint-module-utils:2.4.0
                    └─ debug:2.6.9
              └─ debug:2.6.9
        └─ react-dev-utils:9.0.0
              └─ detect-port-alt:1.1.6
                    └─ debug:2.6.9
        └─ webpack:4.29.6
              └─ micromatch:3.1.10
                    └─ extglob:2.0.4
                          └─ expand-brackets:2.1.4
                                └─ debug:2.6.9
                    └─ snapdragon:0.8.2
                          └─ debug:2.6.9
        └─ webpack-dev-server:3.2.1
              └─ compression:1.7.4
                    └─ debug:2.6.9
              └─ express:4.16.4
                    └─ body-parser:1.18.3
                          └─ debug:2.6.9
                    └─ debug:2.6.9
                    └─ finalhandler:1.1.1
                          └─ debug:2.6.9
                    └─ send:0.16.2
                          └─ debug:2.6.9
              └─ portfinder:1.0.20
                    └─ debug:2.6.9
              └─ serve-index:1.9.1
                    └─ debug:2.6.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.templatesettings:4.1.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.templatesettings:4.1.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:2.1.3
        └─ postcss-preset-env:6.3.1
              └─ postcss-initial:3.0.0
                    └─ lodash.template:4.4.0
                          └─ lodash.templatesettings:4.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of minimist:0.0.8 results in the following vulnerability(s):

• (CVSS 8.8) CWE-94: Improper Control of Generation of Code ('Code Injection')

---

Occurrences

minimist:0.0.8 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ babel-jest:24.7.1
              └─ @jest/transform:24.7.1
                    └─ jest-haste-map:24.7.1
                          └─ fsevents:1.2.8
                                └─ node-pre-gyp:0.12.0
                                      └─ mkdirp:0.5.1
                                            └─ minimist:0.0.8
        └─ babel-loader:8.0.5
              └─ mkdirp:0.5.1
                    └─ minimist:0.0.8
        └─ webpack-dev-server:3.2.1
              └─ chokidar:2.1.5
                    └─ fsevents:1.2.8
                          └─ node-pre-gyp:0.12.0
                                └─ mkdirp:0.5.1
                                      └─ minimist:0.0.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of node-forge:0.7.5 results in the following vulnerability(s):

• (CVSS 8.2) CWE-20: Improper Input Validation

---

Occurrences

node-forge:0.7.5 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ webpack-dev-server:3.2.1
              └─ selfsigned:1.10.4
                    └─ node-forge:0.7.5

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of express:4.16.4 results in the following vulnerability(s):

• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

---

Occurrences

express:4.16.4 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ webpack-dev-server:3.2.1
              └─ express:4.16.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of path-parse:1.0.6 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2021-23343] All versions of package path-parse are vulnerable to Regular Expression Denial o...

---

Occurrences

path-parse:1.0.6 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ resolve:1.10.0
              └─ path-parse:1.0.6

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.isarguments:3.1.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isarguments:3.1.0 is a transitive dependency introduced by the following direct dependency(s):

• redux-promise:0.5.3
        └─ flux-standard-action:0.6.1
              └─ lodash.isplainobject:3.2.0
                    └─ lodash.isarguments:3.1.0
                    └─ lodash.keysin:3.0.8
                          └─ lodash.isarguments:3.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of set-value:0.4.3 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

set-value:0.4.3 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ webpack:4.29.6
              └─ micromatch:3.1.10
                    └─ snapdragon:0.8.2
                          └─ base:0.11.2
                                └─ cache-base:1.0.1
                                      └─ union-value:1.0.0
                                            └─ set-value:0.4.3

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of yargs-parser:10.1.0 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
• (CVSS 7.5) [CVE-2020-7608] yargs-parser could be tricked into adding or modifying properties of Object.prot...

---

Occurrences

yargs-parser:10.1.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ webpack-dev-server:3.2.1
              └─ yargs:12.0.2
                    └─ yargs-parser:10.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.sortby:4.7.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.sortby:4.7.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:2.1.3
        └─ @svgr/webpack:2.4.1
              └─ @svgr/core:2.4.1
                    └─ h2x-core:1.1.1
                          └─ h2x-parse:1.1.1
                                └─ jsdom:13.1.0
                                      └─ whatwg-url:7.0.0
                                            └─ lodash.sortby:4.7.0
        └─ jest:23.6.0
              └─ jest-cli:23.6.0
                    └─ jest-environment-jsdom:23.4.0
                          └─ jsdom:11.12.0
                                └─ whatwg-url:6.5.0
                                      └─ lodash.sortby:4.7.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency react-redux to v8.1.3
• Update react monorepo to v16.14.0 (react, react-dom)
• Update dependency react-redux to v9
• Update dependency react-router-dom to v6
• Update react monorepo to v18 (major) (react, react-dom)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

npm

package.json

• react 16.8.1
• react-dom 16.8.1
• react-router-dom 4.3.1
• react-scripts 5.0.1
• react-redux 8.0.5
• redux 5.0.1
• redux-promise 0.6.0

---

• Check this box to trigger a request for Renovate to run again on this repository

Vulnerabilities

DepShield reports that this application's usage of eslint-utils:1.3.1 results in the following vulnerability(s):

• (CVSS 8.8) CWE-94: Improper Control of Generation of Code ('Code Injection')

---

Occurrences

eslint-utils:1.3.1 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ eslint:5.16.0
              └─ eslint-utils:1.3.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.cond:4.5.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.cond:4.5.2 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:1.1.5
        └─ eslint-plugin-import:2.8.0
              └─ lodash.cond:4.5.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.debounce:4.0.8 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.debounce:4.0.8 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:1.1.5
        └─ webpack-dev-server:2.11.3
              └─ chokidar:2.0.4
                    └─ lodash.debounce:4.0.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of q:1.5.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

---

Occurrences

q:1.5.1 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ @svgr/webpack:4.1.0
              └─ @svgr/plugin-svgo:4.2.0
                    └─ svgo:1.2.2
                          └─ coa:2.0.2
                                └─ q:1.5.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.tail:4.1.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.tail:4.1.1 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:2.1.3
        └─ sass-loader:7.1.0
              └─ lodash.tail:4.1.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.defaults:4.2.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.defaults:4.2.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:1.1.5
        └─ sw-precache-webpack-plugin:0.11.4
              └─ sw-precache:5.2.1
                    └─ lodash.defaults:4.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.template:4.4.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.template:4.4.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:2.1.3
        └─ postcss-preset-env:6.3.1
              └─ postcss-initial:3.0.0
                    └─ lodash.template:4.4.0
        └─ workbox-webpack-plugin:3.6.3
              └─ workbox-build:3.6.3
                    └─ lodash.template:4.4.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of elliptic:6.5.3 results in the following vulnerability(s):

• (CVSS 3.7) [NPMJS]Use of a Broken or Risky Cryptographic Algorithm

---

Occurrences

elliptic:6.5.3 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ webpack:4.29.6
              └─ node-libs-browser:2.2.0
                    └─ crypto-browserify:3.12.0
                          └─ browserify-sign:4.0.4
                                └─ elliptic:6.5.3
                          └─ create-ecdh:4.0.3
                                └─ elliptic:6.5.3

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of kind-of:4.0.0 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:4.0.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ webpack:4.29.6
              └─ micromatch:3.1.10
                    └─ snapdragon:0.8.2
                          └─ base:0.11.2
                                └─ cache-base:1.0.1
                                      └─ has-value:1.0.0
                                            └─ has-values:1.0.0
                                                  └─ kind-of:4.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of http-proxy:1.17.0 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

http-proxy:1.17.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ webpack-dev-server:3.2.1
              └─ http-proxy-middleware:0.19.1
                    └─ http-proxy:1.17.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of kind-of:3.2.2 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:3.2.2 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ @svgr/webpack:4.1.0
              └─ @svgr/plugin-svgo:4.2.0
                    └─ merge-deep:3.0.2
                          └─ clone-deep:0.2.4
                                └─ kind-of:3.2.2
                          └─ kind-of:3.2.2
        └─ webpack:4.29.6
              └─ micromatch:3.1.10
                    └─ braces:2.3.2
                          └─ fill-range:4.0.0
                                └─ is-number:3.0.0
                                      └─ kind-of:3.2.2
                          └─ snapdragon-node:2.1.1
                                └─ snapdragon-util:3.0.1
                                      └─ kind-of:3.2.2
                    └─ snapdragon:0.8.2
                          └─ base:0.11.2
                                └─ cache-base:1.0.1
                                      └─ to-object-path:0.3.0
                                            └─ kind-of:3.2.2
                                └─ class-utils:0.3.6
                                      └─ static-extend:0.1.2
                                            └─ object-copy:0.1.0
                                                  └─ kind-of:3.2.2
                          └─ define-property:0.2.5
                                └─ is-descriptor:0.1.6
                                      └─ is-accessor-descriptor:0.1.6
                                            └─ kind-of:3.2.2
                                      └─ is-data-descriptor:0.1.4
                                            └─ kind-of:3.2.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of http-proxy:1.18.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

http-proxy:1.18.1 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ webpack-dev-server:3.2.1
              └─ http-proxy-middleware:0.19.1
                    └─ http-proxy:1.18.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of glob-parent:3.1.0 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

glob-parent:3.1.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ react-dev-utils:9.0.0
              └─ globby:8.0.2
                    └─ fast-glob:2.2.6
                          └─ glob-parent:3.1.0
        └─ webpack-dev-server:3.2.1
              └─ chokidar:2.1.5
                    └─ glob-parent:3.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of ini:1.3.5 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

ini:1.3.5 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ babel-jest:24.7.1
              └─ @jest/transform:24.7.1
                    └─ jest-haste-map:24.7.1
                          └─ fsevents:1.2.8
                                └─ node-pre-gyp:0.12.0
                                      └─ rc:1.2.8
                                            └─ ini:1.3.5
        └─ react-dev-utils:9.0.0
              └─ global-modules:2.0.0
                    └─ global-prefix:3.0.0
                          └─ ini:1.3.5
        └─ webpack-dev-server:3.2.1
              └─ chokidar:2.1.5
                    └─ fsevents:1.2.8
                          └─ node-pre-gyp:0.12.0
                                └─ rc:1.2.8
                                      └─ ini:1.3.5

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.uniq:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.uniq:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:1.1.5
        └─ css-loader:0.28.7
              └─ cssnano:3.10.0
                    └─ postcss-merge-rules:2.1.2
                          └─ caniuse-api:1.6.1
                                └─ lodash.uniq:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of tar:4.4.8 results in the following vulnerability(s):

• (CVSS 8.1) [CVE-2021-32804] The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3...
• (CVSS 8.1) [CVE-2021-32803] The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3...
• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

---

Occurrences

tar:4.4.8 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ babel-jest:24.7.1
              └─ @jest/transform:24.7.1
                    └─ jest-haste-map:24.7.1
                          └─ fsevents:1.2.8
                                └─ node-pre-gyp:0.12.0
                                      └─ tar:4.4.8
        └─ webpack-dev-server:3.2.1
              └─ chokidar:2.1.5
                    └─ fsevents:1.2.8
                          └─ node-pre-gyp:0.12.0
                                └─ tar:4.4.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of websocket-extensions:0.1.3 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2020-7662] websocket-extensions npm module prior to 1.0.4 allows Denial of Service (DoS) vi...

---

Occurrences

websocket-extensions:0.1.3 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ react-dev-utils:9.0.0
              └─ sockjs-client:1.3.0
                    └─ faye-websocket:0.11.1
                          └─ websocket-driver:0.7.0
                                └─ websocket-extensions:0.1.3

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of minimist:0.0.10 results in the following vulnerability(s):

• (CVSS 8.8) CWE-94: Improper Control of Generation of Code ('Code Injection')

---

Occurrences

minimist:0.0.10 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ jest:24.7.1
              └─ jest-cli:24.7.1
                    └─ @jest/core:24.7.1
                          └─ @jest/reporters:24.7.1
                                └─ istanbul-api:2.1.5
                                      └─ istanbul-reports:2.2.3
                                            └─ handlebars:4.5.3
                                                  └─ optimist:0.6.1
                                                        └─ minimist:0.0.10

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of minimist:1.2.0 results in the following vulnerability(s):

• (CVSS 8.8) CWE-94: Improper Control of Generation of Code ('Code Injection')

---

Occurrences

minimist:1.2.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ @babel/core:7.4.3
              └─ json5:2.1.0
                    └─ minimist:1.2.0
        └─ @svgr/webpack:4.1.0
              └─ loader-utils:1.2.3
                    └─ json5:1.0.1
                          └─ minimist:1.2.0
        └─ babel-jest:24.7.1
              └─ @jest/transform:24.7.1
                    └─ jest-haste-map:24.7.1
                          └─ fsevents:1.2.8
                                └─ node-pre-gyp:0.12.0
                                      └─ rc:1.2.8
                                            └─ minimist:1.2.0
                          └─ sane:4.1.0
                                └─ @cnakazawa/watch:1.0.3
                                      └─ minimist:1.2.0
                                └─ minimist:1.2.0
        └─ webpack-dev-server:3.2.1
              └─ chokidar:2.1.5
                    └─ fsevents:1.2.8
                          └─ node-pre-gyp:0.12.0
                                └─ rc:1.2.8
                                      └─ minimist:1.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of merge-deep:3.0.2 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2021-26707] The merge-deep library before 3.0.3 for Node.js can be tricked into overwriting ...

---

Occurrences

merge-deep:3.0.2 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ @svgr/webpack:4.1.0
              └─ @svgr/plugin-svgo:4.2.0
                    └─ merge-deep:3.0.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of set-value:2.0.0 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

set-value:2.0.0 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ webpack:4.29.6
              └─ micromatch:3.1.10
                    └─ snapdragon:0.8.2
                          └─ base:0.11.2
                                └─ cache-base:1.0.1
                                      └─ set-value:2.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of kind-of:2.0.1 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:2.0.1 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ @svgr/webpack:4.1.0
              └─ @svgr/plugin-svgo:4.2.0
                    └─ merge-deep:3.0.2
                          └─ clone-deep:0.2.4
                                └─ shallow-clone:0.1.2
                                      └─ kind-of:2.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of ssri:6.0.1 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2021-27290] ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression whic...

---

Occurrences

ssri:6.0.1 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ terser-webpack-plugin:1.2.3
              └─ cacache:11.3.2
                    └─ ssri:6.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of handlebars:4.1.2 results in the following vulnerability(s):

• (CVSS 8.2) CWE-20: Improper Input Validation

---

Occurrences

handlebars:4.1.2 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ jest:24.7.1
              └─ jest-cli:24.7.1
                    └─ @jest/core:24.7.1
                          └─ @jest/reporters:24.7.1
                                └─ istanbul-api:2.1.5
                                      └─ istanbul-reports:2.2.3
                                            └─ handlebars:4.1.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

---

Vulnerabilities

DepShield reports that this application's usage of ws:6.2.1 results in the following vulnerability(s):

• (CVSS 5.3) [CVE-2021-32640] ws is an open source WebSocket client and server library for Node.js. A speciall...

---

Occurrences

ws:6.2.1 is a transitive dependency introduced by the following direct dependency(s):

• react-scripts:3.0.0
        └─ jest-environment-jsdom-fourteen:0.1.0
              └─ jsdom:14.1.0
                    └─ ws:6.2.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}