# npm audit report sprintf-js * Severity: moderate sprintf-js vulnerable to denial of service through unbounded precision specifiers - https://github.com/advisories/GHSA-hp3w-g68c-fv3c fix available via `npm audit fix --force` Will install ts-jest@27.0.3, which is a breaking change node_modules/sprintf-js argparse 1.0.0 - 1.0.10 Depends on vulnerable versions of sprintf-js node_modules/@istanbuljs/load-nyc-config/node_modules/argparse js-yaml 3.2.7 - 3.15.2 Depends on vulnerable versions of argparse node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml @istanbuljs/load-nyc-config * Depends on vulnerable versions of js-yaml node_modules/@istanbuljs/load-nyc-config babel-plugin-istanbul >=6.0.0-beta.0 Depends on vulnerable versions of @istanbuljs/load-nyc-config node_modules/babel-plugin-istanbul @jest/transform >=25.1.0 Depends on vulnerable versions of babel-plugin-istanbul node_modules/@jest/transform @jest/core >=25.1.0 Depends on vulnerable versions of @jest/reporters Depends on vulnerable versions of @jest/transform Depends on vulnerable versions of jest-config Depends on vulnerable versions of jest-resolve-dependencies Depends on vulnerable versions of jest-runner Depends on vulnerable versions of jest-runtime Depends on vulnerable versions of jest-snapshot node_modules/@jest/core jest >=25.1.0 Depends on vulnerable versions of @jest/core Depends on vulnerable versions of jest-cli node_modules/jest ts-jest >=25.10.0-alpha.1 Depends on vulnerable versions of @jest/transform Depends on vulnerable versions of babel-jest Depends on vulnerable versions of jest node_modules/ts-jest @jest/reporters >=25.1.0 Depends on vulnerable versions of @jest/transform node_modules/@jest/reporters jest-runner >=25.1.0 Depends on vulnerable versions of @jest/transform Depends on vulnerable versions of jest-runtime node_modules/jest-runner jest-config >=25.1.0 Depends on vulnerable versions of babel-jest Depends on vulnerable versions of jest-circus Depends on vulnerable versions of jest-runner node_modules/jest-config jest-cli >=25.1.0 Depends on vulnerable versions of @jest/core Depends on vulnerable versions of jest-config node_modules/jest-cli jest-runtime >=25.1.0 Depends on vulnerable versions of @jest/globals Depends on vulnerable versions of @jest/transform Depends on vulnerable versions of jest-snapshot node_modules/jest-runtime jest-circus >=25.2.4 Depends on vulnerable versions of @jest/expect Depends on vulnerable versions of jest-runtime Depends on vulnerable versions of jest-snapshot node_modules/jest-circus jest-snapshot >=27.0.0-next.0 Depends on vulnerable versions of @jest/transform node_modules/jest-snapshot @jest/expect * Depends on vulnerable versions of jest-snapshot node_modules/@jest/expect @jest/globals >=28.0.0-alpha.0 Depends on vulnerable versions of @jest/expect node_modules/@jest/globals jest-resolve-dependencies >=27.0.0-next.0 Depends on vulnerable versions of jest-snapshot node_modules/jest-resolve-dependencies babel-jest >=25.1.0 Depends on vulnerable versions of @jest/transform Depends on vulnerable versions of babel-plugin-istanbul node_modules/babel-jest 20 moderate severity vulnerabilities To address issues that do not require attention, run: npm audit fix To address all issues (including breaking changes), run: npm audit fix --force