shopper/framework
Follow this packageGet the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.
Check the version you ship.
Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.
Advisories & recorded fixes
Earlier releases before 2.9.2
Fixed in 2.9.2
63 explicitly affected versions
v2.0.0, v2.0.0-alpha, v2.0.0-beta, v2.0.0-beta10, v2.0.0-beta11, v2.0.0-beta12, v2.0.0-beta13, v2.0.0-beta14, v2.0.0-beta15, v2.0.0-beta16, v2.0.0-beta17, v2.0.0-beta18, v2.0.0-beta19, v2.0.0-beta2, v2.0.0-beta20, v2.0.0-beta21, v2.0.0-beta3, v2.0.0-beta4, v2.0.0-beta5, v2.0.0-beta6, v2.0.0-beta7, v2.0.0-beta8, v2.0.0-beta9, v2.0.1, v2.0.2, v2.0.3, v2.1.1, v2.1.2, v2.1.3, v2.1.4, v2.1.5, v2.1.6, v2.2, v2.2.1, v2.2.2, v2.2.3, v2.2.4, v2.2.5, v2.2.6, v2.2.7, v2.3, v2.3.1, v2.3.2, v2.3.3, v2.4.0, v2.4.1, v2.4.2, v2.4.3, v2.5.0, v2.5.1, v2.6.0, v2.6.1, v2.6.2, v2.6.3, v2.6.4, v2.7.0, v2.7.1, v2.7.2, v2.7.3, v2.8.0, v2.8.1, v2.9.0, v2.9.1
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2.0.0",
"v2.0.0-alpha",
"v2.0.0-beta",
"v2.0.0-beta10",
"v2.0.0-beta11",
"v2.0.0-beta12",
"v2.0.0-beta13",
"v2.0.0-beta14",
"v2.0.0-beta15",
"v2.0.0-beta16",
"v2.0.0-beta17",
"v2.0.0-beta18",
"v2.0.0-beta19",
"v2.0.0-beta2",
"v2.0.0-beta20",
"v2.0.0-beta21",
"v2.0.0-beta3",
"v2.0.0-beta4",
"v2.0.0-beta5",
"v2.0.0-beta6",
"v2.0.0-beta7",
"v2.0.0-beta8",
"v2.0.0-beta9",
"v2.0.1",
"v2.0.2",
"v2.0.3",
"v2.1.1",
"v2.1.2",
"v2.1.3",
"v2.1.4",
"v2.1.5",
"v2.1.6",
"v2.2",
"v2.2.1",
"v2.2.2",
"v2.2.3",
"v2.2.4",
"v2.2.5",
"v2.2.6",
"v2.2.7",
"v2.3",
"v2.3.1",
"v2.3.2",
"v2.3.3",
"v2.4.0",
"v2.4.1",
"v2.4.2",
"v2.4.3",
"v2.5.0",
"v2.5.1",
"v2.6.0",
"v2.6.1",
"v2.6.2",
"v2.6.3",
"v2.6.4",
"v2.7.0",
"v2.7.1",
"v2.7.2",
"v2.7.3",
"v2.8.0",
"v2.8.1",
"v2.9.0",
"v2.9.1"
]
}From 2.0.0 before 2.9.2
Fixed in 2.9.2
41 explicitly affected versions
v2.0.0, v2.0.1, v2.0.2, v2.0.3, v2.1.1, v2.1.2, v2.1.3, v2.1.4, v2.1.5, v2.1.6, v2.2, v2.2.1, v2.2.2, v2.2.3, v2.2.4, v2.2.5, v2.2.6, v2.2.7, v2.3, v2.3.1, v2.3.2, v2.3.3, v2.4.0, v2.4.1, v2.4.2, v2.4.3, v2.5.0, v2.5.1, v2.6.0, v2.6.1, v2.6.2, v2.6.3, v2.6.4, v2.7.0, v2.7.1, v2.7.2, v2.7.3, v2.8.0, v2.8.1, v2.9.0, v2.9.1
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.9.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2.0.0",
"v2.0.1",
"v2.0.2",
"v2.0.3",
"v2.1.1",
"v2.1.2",
"v2.1.3",
"v2.1.4",
"v2.1.5",
"v2.1.6",
"v2.2",
"v2.2.1",
"v2.2.2",
"v2.2.3",
"v2.2.4",
"v2.2.5",
"v2.2.6",
"v2.2.7",
"v2.3",
"v2.3.1",
"v2.3.2",
"v2.3.3",
"v2.4.0",
"v2.4.1",
"v2.4.2",
"v2.4.3",
"v2.5.0",
"v2.5.1",
"v2.6.0",
"v2.6.1",
"v2.6.2",
"v2.6.3",
"v2.6.4",
"v2.7.0",
"v2.7.1",
"v2.7.2",
"v2.7.3",
"v2.8.0",
"v2.8.1",
"v2.9.0",
"v2.9.1"
]
}Earlier releases before 2.9.0
Fixed in 2.9.0
61 explicitly affected versions
v2.0.0, v2.0.0-alpha, v2.0.0-beta, v2.0.0-beta10, v2.0.0-beta11, v2.0.0-beta12, v2.0.0-beta13, v2.0.0-beta14, v2.0.0-beta15, v2.0.0-beta16, v2.0.0-beta17, v2.0.0-beta18, v2.0.0-beta19, v2.0.0-beta2, v2.0.0-beta20, v2.0.0-beta21, v2.0.0-beta3, v2.0.0-beta4, v2.0.0-beta5, v2.0.0-beta6, v2.0.0-beta7, v2.0.0-beta8, v2.0.0-beta9, v2.0.1, v2.0.2, v2.0.3, v2.1.1, v2.1.2, v2.1.3, v2.1.4, v2.1.5, v2.1.6, v2.2, v2.2.1, v2.2.2, v2.2.3, v2.2.4, v2.2.5, v2.2.6, v2.2.7, v2.3, v2.3.1, v2.3.2, v2.3.3, v2.4.0, v2.4.1, v2.4.2, v2.4.3, v2.5.0, v2.5.1, v2.6.0, v2.6.1, v2.6.2, v2.6.3, v2.6.4, v2.7.0, v2.7.1, v2.7.2, v2.7.3, v2.8.0, v2.8.1
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2.0.0",
"v2.0.0-alpha",
"v2.0.0-beta",
"v2.0.0-beta10",
"v2.0.0-beta11",
"v2.0.0-beta12",
"v2.0.0-beta13",
"v2.0.0-beta14",
"v2.0.0-beta15",
"v2.0.0-beta16",
"v2.0.0-beta17",
"v2.0.0-beta18",
"v2.0.0-beta19",
"v2.0.0-beta2",
"v2.0.0-beta20",
"v2.0.0-beta21",
"v2.0.0-beta3",
"v2.0.0-beta4",
"v2.0.0-beta5",
"v2.0.0-beta6",
"v2.0.0-beta7",
"v2.0.0-beta8",
"v2.0.0-beta9",
"v2.0.1",
"v2.0.2",
"v2.0.3",
"v2.1.1",
"v2.1.2",
"v2.1.3",
"v2.1.4",
"v2.1.5",
"v2.1.6",
"v2.2",
"v2.2.1",
"v2.2.2",
"v2.2.3",
"v2.2.4",
"v2.2.5",
"v2.2.6",
"v2.2.7",
"v2.3",
"v2.3.1",
"v2.3.2",
"v2.3.3",
"v2.4.0",
"v2.4.1",
"v2.4.2",
"v2.4.3",
"v2.5.0",
"v2.5.1",
"v2.6.0",
"v2.6.1",
"v2.6.2",
"v2.6.3",
"v2.6.4",
"v2.7.0",
"v2.7.1",
"v2.7.2",
"v2.7.3",
"v2.8.0",
"v2.8.1"
]
}Earlier releases before 2.9.2
Fixed in 2.9.2
63 explicitly affected versions
v2.0.0, v2.0.0-alpha, v2.0.0-beta, v2.0.0-beta10, v2.0.0-beta11, v2.0.0-beta12, v2.0.0-beta13, v2.0.0-beta14, v2.0.0-beta15, v2.0.0-beta16, v2.0.0-beta17, v2.0.0-beta18, v2.0.0-beta19, v2.0.0-beta2, v2.0.0-beta20, v2.0.0-beta21, v2.0.0-beta3, v2.0.0-beta4, v2.0.0-beta5, v2.0.0-beta6, v2.0.0-beta7, v2.0.0-beta8, v2.0.0-beta9, v2.0.1, v2.0.2, v2.0.3, v2.1.1, v2.1.2, v2.1.3, v2.1.4, v2.1.5, v2.1.6, v2.2, v2.2.1, v2.2.2, v2.2.3, v2.2.4, v2.2.5, v2.2.6, v2.2.7, v2.3, v2.3.1, v2.3.2, v2.3.3, v2.4.0, v2.4.1, v2.4.2, v2.4.3, v2.5.0, v2.5.1, v2.6.0, v2.6.1, v2.6.2, v2.6.3, v2.6.4, v2.7.0, v2.7.1, v2.7.2, v2.7.3, v2.8.0, v2.8.1, v2.9.0, v2.9.1
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2.0.0",
"v2.0.0-alpha",
"v2.0.0-beta",
"v2.0.0-beta10",
"v2.0.0-beta11",
"v2.0.0-beta12",
"v2.0.0-beta13",
"v2.0.0-beta14",
"v2.0.0-beta15",
"v2.0.0-beta16",
"v2.0.0-beta17",
"v2.0.0-beta18",
"v2.0.0-beta19",
"v2.0.0-beta2",
"v2.0.0-beta20",
"v2.0.0-beta21",
"v2.0.0-beta3",
"v2.0.0-beta4",
"v2.0.0-beta5",
"v2.0.0-beta6",
"v2.0.0-beta7",
"v2.0.0-beta8",
"v2.0.0-beta9",
"v2.0.1",
"v2.0.2",
"v2.0.3",
"v2.1.1",
"v2.1.2",
"v2.1.3",
"v2.1.4",
"v2.1.5",
"v2.1.6",
"v2.2",
"v2.2.1",
"v2.2.2",
"v2.2.3",
"v2.2.4",
"v2.2.5",
"v2.2.6",
"v2.2.7",
"v2.3",
"v2.3.1",
"v2.3.2",
"v2.3.3",
"v2.4.0",
"v2.4.1",
"v2.4.2",
"v2.4.3",
"v2.5.0",
"v2.5.1",
"v2.6.0",
"v2.6.1",
"v2.6.2",
"v2.6.3",
"v2.6.4",
"v2.7.0",
"v2.7.1",
"v2.7.2",
"v2.7.3",
"v2.8.0",
"v2.8.1",
"v2.9.0",
"v2.9.1"
]
}Earlier releases before 2.8.0
Fixed in 2.8.0
59 explicitly affected versions
v2.0.0, v2.0.0-alpha, v2.0.0-beta, v2.0.0-beta10, v2.0.0-beta11, v2.0.0-beta12, v2.0.0-beta13, v2.0.0-beta14, v2.0.0-beta15, v2.0.0-beta16, v2.0.0-beta17, v2.0.0-beta18, v2.0.0-beta19, v2.0.0-beta2, v2.0.0-beta20, v2.0.0-beta21, v2.0.0-beta3, v2.0.0-beta4, v2.0.0-beta5, v2.0.0-beta6, v2.0.0-beta7, v2.0.0-beta8, v2.0.0-beta9, v2.0.1, v2.0.2, v2.0.3, v2.1.1, v2.1.2, v2.1.3, v2.1.4, v2.1.5, v2.1.6, v2.2, v2.2.1, v2.2.2, v2.2.3, v2.2.4, v2.2.5, v2.2.6, v2.2.7, v2.3, v2.3.1, v2.3.2, v2.3.3, v2.4.0, v2.4.1, v2.4.2, v2.4.3, v2.5.0, v2.5.1, v2.6.0, v2.6.1, v2.6.2, v2.6.3, v2.6.4, v2.7.0, v2.7.1, v2.7.2, v2.7.3
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.8.0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2.0.0",
"v2.0.0-alpha",
"v2.0.0-beta",
"v2.0.0-beta10",
"v2.0.0-beta11",
"v2.0.0-beta12",
"v2.0.0-beta13",
"v2.0.0-beta14",
"v2.0.0-beta15",
"v2.0.0-beta16",
"v2.0.0-beta17",
"v2.0.0-beta18",
"v2.0.0-beta19",
"v2.0.0-beta2",
"v2.0.0-beta20",
"v2.0.0-beta21",
"v2.0.0-beta3",
"v2.0.0-beta4",
"v2.0.0-beta5",
"v2.0.0-beta6",
"v2.0.0-beta7",
"v2.0.0-beta8",
"v2.0.0-beta9",
"v2.0.1",
"v2.0.2",
"v2.0.3",
"v2.1.1",
"v2.1.2",
"v2.1.3",
"v2.1.4",
"v2.1.5",
"v2.1.6",
"v2.2",
"v2.2.1",
"v2.2.2",
"v2.2.3",
"v2.2.4",
"v2.2.5",
"v2.2.6",
"v2.2.7",
"v2.3",
"v2.3.1",
"v2.3.2",
"v2.3.3",
"v2.4.0",
"v2.4.1",
"v2.4.2",
"v2.4.3",
"v2.5.0",
"v2.5.1",
"v2.6.0",
"v2.6.1",
"v2.6.2",
"v2.6.3",
"v2.6.4",
"v2.7.0",
"v2.7.1",
"v2.7.2",
"v2.7.3"
]
}Earlier releases before 2.8.0
Fixed in 2.8.0
59 explicitly affected versions
v2.0.0, v2.0.0-alpha, v2.0.0-beta, v2.0.0-beta10, v2.0.0-beta11, v2.0.0-beta12, v2.0.0-beta13, v2.0.0-beta14, v2.0.0-beta15, v2.0.0-beta16, v2.0.0-beta17, v2.0.0-beta18, v2.0.0-beta19, v2.0.0-beta2, v2.0.0-beta20, v2.0.0-beta21, v2.0.0-beta3, v2.0.0-beta4, v2.0.0-beta5, v2.0.0-beta6, v2.0.0-beta7, v2.0.0-beta8, v2.0.0-beta9, v2.0.1, v2.0.2, v2.0.3, v2.1.1, v2.1.2, v2.1.3, v2.1.4, v2.1.5, v2.1.6, v2.2, v2.2.1, v2.2.2, v2.2.3, v2.2.4, v2.2.5, v2.2.6, v2.2.7, v2.3, v2.3.1, v2.3.2, v2.3.3, v2.4.0, v2.4.1, v2.4.2, v2.4.3, v2.5.0, v2.5.1, v2.6.0, v2.6.1, v2.6.2, v2.6.3, v2.6.4, v2.7.0, v2.7.1, v2.7.2, v2.7.3
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.8.0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2.0.0",
"v2.0.0-alpha",
"v2.0.0-beta",
"v2.0.0-beta10",
"v2.0.0-beta11",
"v2.0.0-beta12",
"v2.0.0-beta13",
"v2.0.0-beta14",
"v2.0.0-beta15",
"v2.0.0-beta16",
"v2.0.0-beta17",
"v2.0.0-beta18",
"v2.0.0-beta19",
"v2.0.0-beta2",
"v2.0.0-beta20",
"v2.0.0-beta21",
"v2.0.0-beta3",
"v2.0.0-beta4",
"v2.0.0-beta5",
"v2.0.0-beta6",
"v2.0.0-beta7",
"v2.0.0-beta8",
"v2.0.0-beta9",
"v2.0.1",
"v2.0.2",
"v2.0.3",
"v2.1.1",
"v2.1.2",
"v2.1.3",
"v2.1.4",
"v2.1.5",
"v2.1.6",
"v2.2",
"v2.2.1",
"v2.2.2",
"v2.2.3",
"v2.2.4",
"v2.2.5",
"v2.2.6",
"v2.2.7",
"v2.3",
"v2.3.1",
"v2.3.2",
"v2.3.3",
"v2.4.0",
"v2.4.1",
"v2.4.2",
"v2.4.3",
"v2.5.0",
"v2.5.1",
"v2.6.0",
"v2.6.1",
"v2.6.2",
"v2.6.3",
"v2.6.4",
"v2.7.0",
"v2.7.1",
"v2.7.2",
"v2.7.3"
]
}Earlier releases before 2.8.0
Fixed in 2.8.0
59 explicitly affected versions
v2.0.0, v2.0.0-alpha, v2.0.0-beta, v2.0.0-beta10, v2.0.0-beta11, v2.0.0-beta12, v2.0.0-beta13, v2.0.0-beta14, v2.0.0-beta15, v2.0.0-beta16, v2.0.0-beta17, v2.0.0-beta18, v2.0.0-beta19, v2.0.0-beta2, v2.0.0-beta20, v2.0.0-beta21, v2.0.0-beta3, v2.0.0-beta4, v2.0.0-beta5, v2.0.0-beta6, v2.0.0-beta7, v2.0.0-beta8, v2.0.0-beta9, v2.0.1, v2.0.2, v2.0.3, v2.1.1, v2.1.2, v2.1.3, v2.1.4, v2.1.5, v2.1.6, v2.2, v2.2.1, v2.2.2, v2.2.3, v2.2.4, v2.2.5, v2.2.6, v2.2.7, v2.3, v2.3.1, v2.3.2, v2.3.3, v2.4.0, v2.4.1, v2.4.2, v2.4.3, v2.5.0, v2.5.1, v2.6.0, v2.6.1, v2.6.2, v2.6.3, v2.6.4, v2.7.0, v2.7.1, v2.7.2, v2.7.3
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.8.0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2.0.0",
"v2.0.0-alpha",
"v2.0.0-beta",
"v2.0.0-beta10",
"v2.0.0-beta11",
"v2.0.0-beta12",
"v2.0.0-beta13",
"v2.0.0-beta14",
"v2.0.0-beta15",
"v2.0.0-beta16",
"v2.0.0-beta17",
"v2.0.0-beta18",
"v2.0.0-beta19",
"v2.0.0-beta2",
"v2.0.0-beta20",
"v2.0.0-beta21",
"v2.0.0-beta3",
"v2.0.0-beta4",
"v2.0.0-beta5",
"v2.0.0-beta6",
"v2.0.0-beta7",
"v2.0.0-beta8",
"v2.0.0-beta9",
"v2.0.1",
"v2.0.2",
"v2.0.3",
"v2.1.1",
"v2.1.2",
"v2.1.3",
"v2.1.4",
"v2.1.5",
"v2.1.6",
"v2.2",
"v2.2.1",
"v2.2.2",
"v2.2.3",
"v2.2.4",
"v2.2.5",
"v2.2.6",
"v2.2.7",
"v2.3",
"v2.3.1",
"v2.3.2",
"v2.3.3",
"v2.4.0",
"v2.4.1",
"v2.4.2",
"v2.4.3",
"v2.5.0",
"v2.5.1",
"v2.6.0",
"v2.6.1",
"v2.6.2",
"v2.6.3",
"v2.6.4",
"v2.7.0",
"v2.7.1",
"v2.7.2",
"v2.7.3"
]
}Earlier releases before 2.8.0
Fixed in 2.8.0
59 explicitly affected versions
v2.0.0, v2.0.0-alpha, v2.0.0-beta, v2.0.0-beta10, v2.0.0-beta11, v2.0.0-beta12, v2.0.0-beta13, v2.0.0-beta14, v2.0.0-beta15, v2.0.0-beta16, v2.0.0-beta17, v2.0.0-beta18, v2.0.0-beta19, v2.0.0-beta2, v2.0.0-beta20, v2.0.0-beta21, v2.0.0-beta3, v2.0.0-beta4, v2.0.0-beta5, v2.0.0-beta6, v2.0.0-beta7, v2.0.0-beta8, v2.0.0-beta9, v2.0.1, v2.0.2, v2.0.3, v2.1.1, v2.1.2, v2.1.3, v2.1.4, v2.1.5, v2.1.6, v2.2, v2.2.1, v2.2.2, v2.2.3, v2.2.4, v2.2.5, v2.2.6, v2.2.7, v2.3, v2.3.1, v2.3.2, v2.3.3, v2.4.0, v2.4.1, v2.4.2, v2.4.3, v2.5.0, v2.5.1, v2.6.0, v2.6.1, v2.6.2, v2.6.3, v2.6.4, v2.7.0, v2.7.1, v2.7.2, v2.7.3
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.8.0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2.0.0",
"v2.0.0-alpha",
"v2.0.0-beta",
"v2.0.0-beta10",
"v2.0.0-beta11",
"v2.0.0-beta12",
"v2.0.0-beta13",
"v2.0.0-beta14",
"v2.0.0-beta15",
"v2.0.0-beta16",
"v2.0.0-beta17",
"v2.0.0-beta18",
"v2.0.0-beta19",
"v2.0.0-beta2",
"v2.0.0-beta20",
"v2.0.0-beta21",
"v2.0.0-beta3",
"v2.0.0-beta4",
"v2.0.0-beta5",
"v2.0.0-beta6",
"v2.0.0-beta7",
"v2.0.0-beta8",
"v2.0.0-beta9",
"v2.0.1",
"v2.0.2",
"v2.0.3",
"v2.1.1",
"v2.1.2",
"v2.1.3",
"v2.1.4",
"v2.1.5",
"v2.1.6",
"v2.2",
"v2.2.1",
"v2.2.2",
"v2.2.3",
"v2.2.4",
"v2.2.5",
"v2.2.6",
"v2.2.7",
"v2.3",
"v2.3.1",
"v2.3.2",
"v2.3.3",
"v2.4.0",
"v2.4.1",
"v2.4.2",
"v2.4.3",
"v2.5.0",
"v2.5.1",
"v2.6.0",
"v2.6.1",
"v2.6.2",
"v2.6.3",
"v2.6.4",
"v2.7.0",
"v2.7.1",
"v2.7.2",
"v2.7.3"
]
}