Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update babel monorepo #6

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

chore(deps): update babel monorepo

8b9c840
Select commit
Loading
Failed to load commit list.
Open

chore(deps): update babel monorepo #6

chore(deps): update babel monorepo
8b9c840
Select commit
Loading
Failed to load commit list.
Mend/5034428 / Mend Security Check failed Oct 17, 2024 in 24m 36s

Security Report

The Security Check found 4 vulnerabilities.

CVE Severity CVSS Score Exploit Maturity EPSS Vulnerable Library Suggested Fix Issue
CVE-2022-39353

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> video.js-7.14.3.tgz (Root Library)

   -> mpd-parser-0.17.0.tgz

     -> ❌ xmldom-0.5.0.tgz (Vulnerable Library)

Critical 9.4 Not Defined 0.2% xmldom-0.5.0.tgz Upgrade to version: @xmldom/xmldom - 0.7.7,0.8.4 None
CVE-2020-7677

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> karma-safaritechpreview-launcher-0.0.6.tgz (Root Library)

   -> fs-promise-0.5.0.tgz

     -> thenify-all-1.6.0.tgz

       -> ❌ thenify-3.3.0.tgz (Vulnerable Library)

High 8.6 Proof of concept 0.4% thenify-3.3.0.tgz Upgrade to version: thenify - 3.3.1;org.webjars.npm:thenify:3.3.1 None
CVE-2022-3517

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> karma-safaritechpreview-launcher-0.0.6.tgz (Root Library)

   -> fs-promise-0.5.0.tgz

     -> fs-extra-0.26.7.tgz

       -> rimraf-2.6.2.tgz

         -> glob-7.1.2.tgz

           -> ❌ minimatch-3.0.4.tgz (Vulnerable Library)

High 7.5 Not Defined 0.2% minimatch-3.0.4.tgz Upgrade to version: minimatch - 3.0.5 None
CVE-2021-32796

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> video.js-7.14.3.tgz (Root Library)

   -> mpd-parser-0.17.0.tgz

     -> ❌ xmldom-0.5.0.tgz (Vulnerable Library)

Medium 6.5 Not Defined 0.1% xmldom-0.5.0.tgz Upgrade to version: @xmldom/xmldom - 0.7.0 None

Total libraries scanned: 51
Scan token: 4620524b81aa4bbf8820d766e8ddc04e