Update dependency autolinker to v3 #10
Security Report
❗️ The scan was completed with partial results. There were issues encountered while retrieving or scanning dependencies for the following package managers: go. This may result in incomplete coverage of open-source dependencies used in the repository.
You have successfully remediated 2 vulnerabilities, but introduced 1 new vulnerabilities in this branch.
❌ New vulnerabilities:
CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue | Reachability |
---|---|---|---|---|---|---|
WS-2020-0208Path to dependency file: /webapp/package.json Path to vulnerable library: /webapp/node_modules/highlight.js/package.json Dependency Hierarchy: -> ❌ highlight.js-9.2.0.tgz (Vulnerable Library) |
Medium | 5.3 | highlight.js-9.2.0.tgz | Upgrade to version: 10.4.1 | #7 |
✔️ Remediated vulnerabilities:
CVE | Vulnerable Library |
---|---|
WS-2017-3770 | autolinker-0.24.1.tgz |
WS-2019-0540 | autolinker-0.24.1.tgz |
Base branch total remaining vulnerabilities: 21
Base branch commit: 50e77553f48439042a557ffe16d3a033f065c09a
Total libraries scanned: 172
Scan token: 7ef198856e4341f88790fdf8adbb1f9d