grafana 7.2.1 snyk yarn

$ snyk test

Testing /Users/dlorenc/go/src/github.com/grafana/grafana...

Tested 461 dependencies for known issues, found 12 issues, 22 vulnerable paths.


Issues to fix by upgrading:

  Upgrade [email protected] to [email protected] to fix
  ✗ Cross-site Scripting (XSS) [Medium Severity][https://snyk.io/vuln/SNYK-JS-ANGULAR-570058] in [email protected]
    introduced by [email protected]
  ✗ Cross-site Scripting (XSS) [High Severity][https://snyk.io/vuln/SNYK-JS-ANGULAR-572020] in [email protected]
    introduced by [email protected]
  ✗ Prototype Pollution [High Severity][https://snyk.io/vuln/SNYK-JS-ANGULAR-534884] in [email protected]
    introduced by [email protected]

  Upgrade [email protected] to [email protected] to fix
  ✗ Prototype Pollution [High Severity][https://snyk.io/vuln/SNYK-JS-LODASH-590103] in [email protected]
    introduced by [email protected] and 7 other path(s)

  Upgrade [email protected] to [email protected] to fix
  ✗ Denial of Service [Medium Severity][https://snyk.io/vuln/SNYK-JS-NODEFETCH-674311] in [email protected]
    introduced by [email protected] > [email protected] > [email protected] > [email protected] > [email protected]


Issues with no direct upgrade or patch:
  ✗ Regular Expression Denial of Service (ReDoS) [High Severity][https://snyk.io/vuln/SNYK-JS-ACORN-559469] in [email protected]
    introduced by [email protected] > [email protected] > [email protected] > [email protected] > [email protected] > [email protected]
  This issue was fixed in versions: 5.7.4, 6.4.1, 7.1.1
  ✗ Prototype Pollution [Medium Severity][https://snyk.io/vuln/SNYK-JS-DOTPROP-543489] in [email protected]
    introduced by [email protected] > [email protected] > [email protected] > [email protected]
  This issue was fixed in versions: 4.2.1, 5.1.1
  ✗ Prototype Pollution [High Severity][https://snyk.io/vuln/SNYK-JS-INI-1048974] in [email protected]
    introduced by [email protected] > [email protected] > [email protected] > [email protected] > [email protected] and 2 other path(s)
  This issue was fixed in versions: 1.3.6
  ✗ Prototype Pollution [Medium Severity][https://snyk.io/vuln/SNYK-JS-MINIMIST-559764] in [email protected]
    introduced by [email protected] > [email protected] > [email protected] > [email protected] > [email protected] > [email protected] > [email protected] and 1 other path(s)
  This issue was fixed in versions: 0.2.1, 1.2.3
  ✗ Regular Expression Denial of Service (ReDoS) [High Severity][https://snyk.io/vuln/SNYK-JS-UAPARSERJS-1023599] in [email protected]
    introduced by [email protected] > [email protected] > [email protected] > [email protected]
  This issue was fixed in versions: 0.7.23
  ✗ Regular Expression Denial of Service (ReDoS) [High Severity][https://snyk.io/vuln/SNYK-JS-UAPARSERJS-610226] in [email protected]
    introduced by [email protected] > [email protected] > [email protected] > [email protected]
  This issue was fixed in versions: 0.7.22
  ✗ Prototype Pollution [Medium Severity][https://snyk.io/vuln/SNYK-JS-UNDEFSAFE-548940] in [email protected]
    introduced by [email protected] > [email protected]
  This issue was fixed in versions: 2.0.3