Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[NEUTRAL] Update dependency fsevents to ^1.2.3 #996

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

[NEUTRAL] Update dependency fsevents to ^1.2.3

7c19102
Select commit
Loading
Failed to load commit list.
Open

[NEUTRAL] Update dependency fsevents to ^1.2.3 #996

[NEUTRAL] Update dependency fsevents to ^1.2.3
7c19102
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / WhiteSource Security Check failed Oct 17, 2024 in 45m 6s

Security Report

You have successfully remediated 1 vulnerabilities, but introduced 5 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue Reachability
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/net20/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/net45/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/net35/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/portable-net45+wp80+win8+wpa81+dnxcore50/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/portable-net40+sl5+wp80+win8+wpa81/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2021-32740 addressable-2.7.0.gem

Base branch total remaining vulnerabilities: 445
Base branch commit: ba8cd9078c8ce0cb202767d627706711237abf71


Total libraries scanned: 2289

Scan token: 16dcb54c812b436cab0471d5f038124c

View more details on Mend for GitHub.com