{"uuid": "c21fc613-b941-4bc4-b546-e5049df399c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-w5hq-g745-h8pq", "type": "seen", "source": "https://gist.github.com/Swan15/f63b6d92bdc0ec3aead0157b2e81efe1", "content": "{\n  \"auditReportVersion\": 2,\n  \"vulnerabilities\": {\n    \"argparse\": {\n      \"name\": \"argparse\",\n      \"severity\": \"moderate\",\n      \"isDirect\": false,\n      \"via\": [\n        \"sprintf-js\"\n      ],\n      \"effects\": [\n        \"mammoth\"\n      ],\n      \"range\": \"1.0.0 - 1.0.10\",\n      \"nodes\": [\n        \"node_modules/argparse\"\n      ],\n      \"fixAvailable\": {\n        \"name\": \"mammoth\",\n        \"version\": \"0.3.29\",\n        \"isSemVerMajor\": true\n      }\n    },\n    \"exceljs\": {\n      \"name\": \"exceljs\",\n      \"severity\": \"moderate\",\n      \"isDirect\": true,\n      \"via\": [\n        \"uuid\"\n      ],\n      \"effects\": [],\n      \"range\": \">=3.5.0\",\n      \"nodes\": [\n        \"node_modules/exceljs\"\n      ],\n      \"fixAvailable\": {\n        \"name\": \"exceljs\",\n        \"version\": \"3.4.0\",\n        \"isSemVerMajor\": true\n      }\n    },\n    \"mammoth\": {\n      \"name\": \"mammoth\",\n      \"severity\": \"moderate\",\n      \"isDirect\": true,\n      \"via\": [\n        \"argparse\"\n      ],\n      \"effects\": [],\n      \"range\": \">=0.3.30\",\n      \"nodes\": [\n        \"node_modules/mammoth\"\n      ],\n      \"fixAvailable\": {\n        \"name\": \"mammoth\",\n        \"version\": \"0.3.29\",\n        \"isSemVerMajor\": true\n      }\n    },\n    \"sprintf-js\": {\n      \"name\": \"sprintf-js\",\n      \"severity\": \"moderate\",\n      \"isDirect\": false,\n      \"via\": [\n        {\n          \"source\": 1241202,\n          \"name\": \"sprintf-js\",\n          \"dependency\": \"sprintf-js\",\n          \"title\": \"sprintf-js vulnerable to denial of service through unbounded precision specifiers\",\n          \"url\": \"https://github.com/advisories/GHSA-hp3w-g68c-fv3c\",\n          \"severity\": \"moderate\",\n          \"cwe\": [\n            \"CWE-1284\"\n          ],\n          \"cvss\": {\n            \"score\": 5.3,\n            \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\"\n          },\n          \"range\": \"<=1.1.3\"\n        }\n      ],\n      \"effects\": [\n        \"argparse\"\n      ],\n      \"range\": \"*\",\n      \"nodes\": [\n        \"node_modules/sprintf-js\"\n      ],\n      \"fixAvailable\": {\n        \"name\": \"mammoth\",\n        \"version\": \"0.3.29\",\n        \"isSemVerMajor\": true\n      }\n    },\n    \"uuid\": {\n      \"name\": \"uuid\",\n      \"severity\": \"moderate\",\n      \"isDirect\": false,\n      \"via\": [\n        {\n          \"source\": 1119441,\n          \"name\": \"uuid\",\n          \"dependency\": \"uuid\",\n          \"title\": \"uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided\",\n          \"url\": \"https://github.com/advisories/GHSA-w5hq-g745-h8pq\",\n          \"severity\": \"moderate\",\n          \"cwe\": [\n            \"CWE-787\",\n            \"CWE-1285\"\n          ],\n          \"cvss\": {\n            \"score\": 7.5,\n            \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\"\n          },\n          \"range\": \"<11.1.1\"\n        }\n      ],\n      \"effects\": [\n        \"exceljs\"\n      ],\n      \"range\": \"<11.1.1\",\n      \"nodes\": [\n        \"node_modules/uuid\"\n      ],\n      \"fixAvailable\": {\n        \"name\": \"exceljs\",\n        \"version\": \"3.4.0\",\n        \"isSemVerMajor\": true\n      }\n    }\n  },\n  \"metadata\": {\n    \"vulnerabilities\": {\n      \"info\": 0,\n      \"low\": 0,\n      \"moderate\": 5,\n      \"high\": 0,\n      \"critical\": 0,\n      \"total\": 5\n    },\n    \"dependencies\": {\n      \"prod\": 465,\n      \"dev\": 105,\n      \"optional\": 126,\n      \"peer\": 0,\n      \"peerOptional\": 0,\n      \"total\": 637\n    }\n  }\n}\n", "creation_timestamp": "2026-10-08T08:30:33.000000Z"}