Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.2.0
Report Generated On: Fri, 30 Jan 2026 10:47:51 GMT
Dependencies Scanned: 31 (31 unique)
Vulnerable Dependencies: 1
Vulnerabilities Found: 1
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2026-01-29T11:52:15Z
NVD API Last Modified: 2026-01-29T11:15:53Z
NVD Cache Last Checked: 2026-01-29T11:52:15Z
NVD Cache Last Modified: 2026-01-29T11:15:53Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Package	Highest Severity	CVE Count	Evidence Count
.eslintrc.js			0	0
@parcel/reporter-dev-server:2.16.3	pkg:npm/%40parcel%2Freporter-dev-server@2.16.3	MEDIUM	1	3
bar.js			0	0
baseview.js			0	0
bindHandler.js			0	0
bluescreen.js			0	0
bootstrap.bundle.min.js			0	0
check-ie11.js			0	0
d.js			0	0
d3.min.js			0	0
dialogHandler.js			0	0
digital-clock.js			0	0
dumper.js			0	0
errorHandler.js			0	0
eslint.config.js			0	0
file.js			0	0
helpers.js			0	0
index.js			0	0
jquery.min.js			0	0
main.js			0	0
newhash.js			0	0
notification-keyboard-handheld.js			0	0
nv.d3.min.js			0	0
open-editor.js			0	0
preventFormResubmit.js			0	0
process.js			0	0
settings.js			0	0
table-sort.js			0	0
tabs.js			0	0
toggle.js			0	0
utils.js			0	0

Dependencies (vulnerable)

.eslintrc.js

File Path: /github/workspace/zmsticketprinter/.eslintrc.js
MD5: 7721d9c4896c7c62cffdd576950fb705
SHA1: 3cf03c317142986975b4bc789f342fbc2f2e285f
SHA256:46a15e54d709c2c296c5dd22a6d8f485f05f7405a01bba9b054987cda9138046

Evidence

Identifiers

None

@parcel/reporter-dev-server:2.16.3

File Path: /github/workspace/zmsticketprinter/package-lock.json?@parcel/reporter-dev-server

Referenced In Project/Scope: package-lock.json: transitive

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	name	@parcel/reporter-dev-server	High
Product	package.json	name	@parcel/reporter-dev-server	Highest
Version	package.json	version	2.16.3	Highest

Identifiers

pkg:npm/%40parcel%2Freporter-dev-server@2.16.3 (Confidence:Highest)

Published Vulnerabilities

GHSA-qm9p-f9j5-w83w (NPM)

parcel versions 1.6.1 and above have an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them.

CWE-346 Origin Validation Error

CVSSv3:

Base Score: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Unscored:

Severity: moderate

References:

NPM Advisory reference: - https://gist.github.com/R4356th/41f468def606b2406e36f7193f5322b8
NPM Advisory reference: - https://github.com/advisories/GHSA-qm9p-f9j5-w83w
NPM Advisory reference: - https://github.com/parcel-bundler/parcel/commit/4bc56e3242a85491c7edf589966e9b44c6330c49
NPM Advisory reference: - https://github.com/parcel-bundler/parcel/discussions/10089
NPM Advisory reference: - https://github.com/parcel-bundler/parcel/issues/10216
NPM Advisory reference: - https://github.com/parcel-bundler/parcel/pull/10138
NPM Advisory reference: - https://nvd.nist.gov/vuln/detail/CVE-2025-56648

Vulnerable Software & Versions (NPM):

cpe:2.3:a:*:\@parcel\/reporter-dev-server:\>\=1.6.1\<\=2.16.3:*:*:*:*:*:*:*

bar.js

File Path: /github/workspace/zmsticketprinter/vendor/tracy/tracy/src/Tracy/Bar/assets/bar.js
MD5: 2a9b73064834f21ea5a9894c9521c38b
SHA1: f5f666c069b61694a0293cc2d2b9b1c228c9ab51
SHA256:94546cd6dce28e555f30405bce897655b4146076f76f86a0a43e6831b6ae2d45

Evidence

Identifiers

None

baseview.js

File Path: /github/workspace/zmsticketprinter/js/lib/baseview.js
MD5: ef0014764788621094775a53f0a36db0
SHA1: dab306fe8f3ea5693f57b9fbaecc0c403fbae294
SHA256:8adbccbb71e88e8a605c4fb7c6408c7d5f201113439388344dc9501cf9a9f91d

Evidence

Identifiers

None

bindHandler.js

File Path: /github/workspace/zmsticketprinter/js/lib/bindHandler.js
MD5: 02da9fbcce9021bb27d94cbc5d1c3e7b
SHA1: 9b8083272a4b682498f5e5e396fef74f35073e7e
SHA256:cb011db8f35a155950539f68dca786e81dac335911bfa9182404e5ef5da5c0c3

Evidence

Identifiers

None

bluescreen.js

File Path: /github/workspace/zmsticketprinter/vendor/tracy/tracy/src/Tracy/BlueScreen/assets/bluescreen.js
MD5: 0f129e65454877880fc2954c4a461f57
SHA1: 56da74e26355080009a5545acaf8e93b37b3ecfb
SHA256:087de1ff1cbedf322cc38208f21ee48a4213018b49b25adc788d15ffe0cb0b10

Evidence

Identifiers

None

bootstrap.bundle.min.js

File Path: /github/workspace/zmsticketprinter/vendor/phpunit/php-code-coverage/src/Report/Html/Renderer/Template/js/bootstrap.bundle.min.js
MD5: 43629cbd1e4634150e99b74d2c35a725
SHA1: c7827462c3ce7eacd5d4fbc975f6fd572b047778
SHA256:cb789b7cec81aa580177e1b3c0561011539974d243d3a1de0d78a1a278015cab

Evidence

Identifiers

None

check-ie11.js

File Path: /github/workspace/zmsticketprinter/check-ie11.js
MD5: d899ed1a2d5b9a387bbaf9512ae415be
SHA1: ddfe38cda652817d7a2f96179187d0f66595ce0e
SHA256:223b240f60db5a76e28d424b4ef7a540f30658ce1554aeb24f44c843c310a94d

Evidence

Identifiers

None

d.js

File Path: /github/workspace/zmsticketprinter/vendor/aronduby/dump/src/D/resources/d.js
MD5: 30b19c3d953860cf9b890550ad398793
SHA1: 5a5b9c9d5d19497711bf1ea6ce381a632b917f6d
SHA256:92988e463e37017bc3528f002a7be97809dcdc3fece18e1635b1f41f7178f278

Evidence

Identifiers

None

d3.min.js

File Path: /github/workspace/zmsticketprinter/vendor/phpunit/php-code-coverage/src/Report/Html/Renderer/Template/js/d3.min.js
MD5: 5bc245068b1b70d4c3eaef79045023e4
SHA1: 4cb68b0a6a11e6d7cf8f3712ab65a783fb49ea6c
SHA256:76c39718d1c0a3fb321676b3b7e29306c0907919a5716d5728bd1b08ae0169e7

Evidence

Identifiers

None

dialogHandler.js

File Path: /github/workspace/zmsticketprinter/js/lib/dialogHandler.js
MD5: 8d1d84f8b07f2dbb70639b1839b23079
SHA1: 9ad903d2c276dd1cedb51f5f200149fc99a1a188
SHA256:d3f1d7347359cccdf577925f2a88c74820eb09011f32493c4f4dd799e2724f36

Evidence

Identifiers

None

digital-clock.js

File Path: /github/workspace/zmsticketprinter/js/block/digital-clock.js
MD5: 1913d735e1d0913ff00bf09fe3be3276
SHA1: cffa17eb0a0208bcce65b3fd65b1391ca4935a32
SHA256:ac68d894263d4eaf4eb697e221dafff5d67b42e60abbd848889b76cc56582f72

Evidence

Identifiers

None

dumper.js

File Path: /github/workspace/zmsticketprinter/vendor/tracy/tracy/src/Tracy/Dumper/assets/dumper.js
MD5: a1a10099927de11cddeac3f5e6f06496
SHA1: 8ece5f95fd921ff4774b7d879c2bf2fbfc4be8f5
SHA256:e76c473df57087ed36916bd6316bcb334e0f47ce9fdaefe433302c170d228f98

Evidence

Identifiers

None

errorHandler.js

File Path: /github/workspace/zmsticketprinter/js/lib/errorHandler.js
MD5: 75c1bf6b72baeb97109b97d8978af636
SHA1: 128ec296b4cc81c13f09821ebe6e7c69a53b449a
SHA256:42cb23580077b2e0af303218e1453583cf0ce22391c18512f3b71b5f233d2615

Evidence

Identifiers

None

eslint.config.js

File Path: /github/workspace/zmsticketprinter/vendor/tracy/tracy/eslint.config.js
MD5: 59b634b302dcd0b63ba01abbce9b95cc
SHA1: f0e34727345c321c9360d3c01ae24179d5a6cccf
SHA256:c1f89b20da818738089c388a7bb7633d6ec61204471311852bc3ef475529067d

Evidence

Identifiers

None

file.js

File Path: /github/workspace/zmsticketprinter/vendor/phpunit/php-code-coverage/src/Report/Html/Renderer/Template/js/file.js
MD5: 3ffd21f16409adb49997d108bdf7a05a
SHA1: f8be112d2b017baa111e385886e3cd6d447e7f33
SHA256:2741fcd58f71ff97eefc006b8d74154da084723753b5d6947fd53d9543317316

Evidence

Identifiers

None

helpers.js

File Path: /github/workspace/zmsticketprinter/vendor/tracy/tracy/src/Tracy/assets/helpers.js
MD5: 22291596fcf46576fbf952f4ff6ec362
SHA1: 6e3f850f5951b252173cf4c0f41ad2e32ed11939
SHA256:db550de99ec013d1c08805a2d76c4c5d982e96ad84f07e4363296673df53e5a5

Evidence

Identifiers

None

index.js

File Path: /github/workspace/zmsticketprinter/js/index.js
MD5: d21391cdf0640962eb01d6b54fc30aa9
SHA1: f5829c5b3ffbd7b819c011b5b1d49f4e788cd322
SHA256:e402178bcad0ca77a5beecda5f34fe3d1a307918cda7f4094634a6fe4d614289

Evidence

Identifiers

None

jquery.min.js

File Path: /github/workspace/zmsticketprinter/vendor/phpunit/php-code-coverage/src/Report/Html/Renderer/Template/js/jquery.min.js
MD5: c9771cc3e90e18f5336eedbd0fffb2cf
SHA1: 6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5
SHA256:3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24

Evidence

Identifiers

None

main.js

File Path: /github/workspace/zmsticketprinter/js/page/main.js
MD5: 2fe71418adad05dbbd1530d1cf1d2673
SHA1: 0e61f085bbf0644abc72b71aeb287eaa1545e4df
SHA256:d5aa45f4ca2e51d7438a3bcf3649a151d2549c9ef942d244932c3e4c40218869

Evidence

Identifiers

None

newhash.js

File Path: /github/workspace/zmsticketprinter/js/page/newhash.js
MD5: 0ec432d9ae514061a3c17a3434754b48
SHA1: a3587bb20a1ac8b7cf5b0fe1919c9fcb392bdccc
SHA256:a20aaf65f929dc1a3f91327f26b7d7e1f8cda3173d11728496aa8548b4d0bc24

Evidence

Identifiers

None

notification-keyboard-handheld.js

File Path: /github/workspace/zmsticketprinter/js/block/notification-keyboard-handheld.js
MD5: b8689423088ecd8c5ec38d76bd3adbb8
SHA1: 604c6091686ec32c4a301d3b2203f0c9a05a96ec
SHA256:928144ef9edfce69dfe04a66cf58a8e08ff2f4104615131ad3a1f7f5293781fe

Evidence

Identifiers

None

nv.d3.min.js

File Path: /github/workspace/zmsticketprinter/vendor/phpunit/php-code-coverage/src/Report/Html/Renderer/Template/js/nv.d3.min.js
MD5: faf359a29dd581bd8f288f15ea24d063
SHA1: 25249613b132ff52b704f6f52bc52a1b06bfa64a
SHA256:0ec70f7ac9519d96d4a814bccfa73f574a3b3a8c2646eeaa449ccea68033fe7c

Evidence

Identifiers

None

open-editor.js

File Path: /github/workspace/zmsticketprinter/vendor/tracy/tracy/tools/open-in-editor/windows/open-editor.js
MD5: 768504f6a16bcbb92e4f934bc748cd5f
SHA1: 180f2fc5828e209334d531b5690f2688db5fb313
SHA256:071c893fa96c1940161258784d571fe8ec6aa10b93365c8993b001f25badd33d

Evidence

Identifiers

None

preventFormResubmit.js

File Path: /github/workspace/zmsticketprinter/js/element/form/preventFormResubmit.js
MD5: a6ea28fc89d621392a2ff0411d4afa0f
SHA1: 33110537806b052080aa11025d38891cb12eb9f1
SHA256:a3418c6aa569205a9d0e492b98d9daf82315582e8f1353ba1e7aa3cc02a48fe5

Evidence

Identifiers

None

process.js

File Path: /github/workspace/zmsticketprinter/js/page/process.js
MD5: 29ab3f0ca397a55d6bcb79e745433153
SHA1: e511ae63e0293eab40658b9a95bd2c2ea0631a2f
SHA256:68bc360cec36ed51c0f4f759956ae13a7cfd3fe3e26a9e2d49e37a247dc99f6c

Evidence

Identifiers

None

settings.js

File Path: /github/workspace/zmsticketprinter/js/settings.js
MD5: fa3236a4a4b938c6ef2019a7d2f55b9c
SHA1: e648357a346b4e5648eaa6d3df8a5a325b07bba6
SHA256:8400c8962c30eca74bf65135ebf8b328a943724a472de0e1a91e265086a4d1d7

Evidence

Identifiers

None

table-sort.js

File Path: /github/workspace/zmsticketprinter/vendor/tracy/tracy/src/Tracy/assets/table-sort.js
MD5: 94691a23df5fdd9b04e802f126746bde
SHA1: f366cdbc896cba74b2802b489b37c02afd37ad83
SHA256:9457c18c3f34de45becb447759878bd8e49d1a30cca387aaf5dec1c895e9c8a7

Evidence

Identifiers

None

tabs.js

File Path: /github/workspace/zmsticketprinter/vendor/tracy/tracy/src/Tracy/assets/tabs.js
MD5: 24eb02e61eb1830764a78d9d4b00d046
SHA1: 72b3152b2c012508a6064f3998e33856a0ef2d67
SHA256:ea38495a19f612057902d786212f3b942123ecf518419e7ce728fc4b943f6ddb

Evidence

Identifiers

None

toggle.js

File Path: /github/workspace/zmsticketprinter/vendor/tracy/tracy/src/Tracy/assets/toggle.js
MD5: 2ea8d7fad6192690d2dcf46c2698994e
SHA1: 000c31d840283b2456f95408e5d37f98ff9d45a0
SHA256:527868421055fe097163e604bf5dafc1127fffe1540c972126f803fd31c1ecad

Evidence

Identifiers

None

utils.js

File Path: /github/workspace/zmsticketprinter/js/lib/utils.js
MD5: fbebfad95d2dc131bcd0b6c6154fca7d
SHA1: 7c65625af409651b632f29176df36d833a7d79fa
SHA256:bb2f910346d452adff66a0bf33a525b5c89c39b9dd8c811e54a5be6eb0bd3749

Evidence

Identifiers

None

How to read the report | Suppressing false positives | Getting Help: github issues

Project: zmsticketprinter

Summary

Dependencies (vulnerable)

.eslintrc.js

Evidence

Identifiers

@parcel/reporter-dev-server:2.16.3

Evidence

Identifiers

Published Vulnerabilities

bar.js

Evidence

Identifiers

baseview.js

Evidence

Identifiers

bindHandler.js

Evidence

Identifiers

bluescreen.js

Evidence

Identifiers

bootstrap.bundle.min.js

Evidence

Identifiers

check-ie11.js

Evidence

Identifiers

d.js

Evidence

Identifiers

d3.min.js

Evidence

Identifiers

dialogHandler.js

Evidence

Identifiers

digital-clock.js

Evidence

Identifiers

dumper.js

Evidence

Identifiers

errorHandler.js

Evidence

Identifiers

eslint.config.js

Evidence

Identifiers

file.js

Evidence

Identifiers

helpers.js

Evidence

Identifiers

index.js

Evidence

Identifiers

jquery.min.js

Evidence

Identifiers

main.js

Evidence

Identifiers

newhash.js

Evidence

Identifiers

notification-keyboard-handheld.js

Evidence

Identifiers

nv.d3.min.js

Evidence

Identifiers

open-editor.js

Evidence

Identifiers

preventFormResubmit.js

Evidence

Identifiers