{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "source-map-js": {
      "name": "source-map-js",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1241209,
          "name": "source-map-js",
          "dependency": "source-map-js",
          "title": "source-map-js allows event-loop denial of service through indexed source-map section offsets",
          "url": "https://github.com/advisories/GHSA-68fv-2mgg-jv7q",
          "severity": "high",
          "cwe": [
            "CWE-1284"
          ],
          "cvss": {
            "score": 7.5,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
          },
          "range": ">=1.0.0 <1.2.2"
        }
      ],
      "effects": [],
      "range": "1.0.0 - 1.2.1",
      "nodes": [
        "node_modules/source-map-js"
      ],
      "fixAvailable": true
    },
    "vite": {
      "name": "vite",
      "severity": "high",
      "isDirect": true,
      "via": [
        {
          "source": 1242622,
          "name": "vite",
          "dependency": "vite",
          "title": "launch-editor: escapeCmdArgs() omits % escaping on Windows",
          "url": "https://github.com/advisories/GHSA-698v-4r3x-3vcv",
          "severity": "moderate",
          "cwe": [
            "CWE-78"
          ],
          "cvss": {
            "score": 0,
            "vectorString": null
          },
          "range": "<=6.4.3"
        },
        {
          "source": 1242651,
          "name": "vite",
          "dependency": "vite",
          "title": "launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors",
          "url": "https://github.com/advisories/GHSA-r825-w8mm-5pxw",
          "severity": "moderate",
          "cwe": [
            "CWE-88"
          ],
          "cvss": {
            "score": 0,
            "vectorString": null
          },
          "range": "<=6.4.3"
        },
        {
          "source": 1242658,
          "name": "vite",
          "dependency": "vite",
          "title": "launch-editor: `fs.existsSync()` existence check can be bypassed on Windows",
          "url": "https://github.com/advisories/GHSA-587h-7wmj-h5pm",
          "severity": "high",
          "cwe": [
            "CWE-77"
          ],
          "cvss": {
            "score": 0,
            "vectorString": null
          },
          "range": "<=6.4.3"
        },
        {
          "source": 1242724,
          "name": "vite",
          "dependency": "vite",
          "title": "Vite: Cross origin script execution through Vite custom middleware",
          "url": "https://github.com/advisories/GHSA-9jrq-w75r-8gcw",
          "severity": "low",
          "cwe": [
            "CWE-80"
          ],
          "cvss": {
            "score": 0,
            "vectorString": null
          },
          "range": "<=6.4.3"
        },
        {
          "source": 1242730,
          "name": "vite",
          "dependency": "vite",
          "title": "Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine",
          "url": "https://github.com/advisories/GHSA-rq7h-c2jc-7f22",
          "severity": "moderate",
          "cwe": [
            "CWE-22",
            "CWE-284"
          ],
          "cvss": {
            "score": 0,
            "vectorString": null
          },
          "range": "<=6.4.3"
        }
      ],
      "effects": [],
      "range": "<=6.4.3",
      "nodes": [
        "node_modules/vite"
      ],
      "fixAvailable": true
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 2,
      "critical": 0,
      "total": 2
    },
    "dependencies": {
      "prod": 53,
      "dev": 121,
      "optional": 59,
      "peer": 1,
      "peerOptional": 0,
      "total": 180
    }
  }
}