Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[NEUTRAL] Update dependency eslint-plugin-import to ^2.9.0 #999

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

chore(deps): update dependency eslint-plugin-import to ^2.9.0

81adebe
Select commit
Loading
Failed to load commit list.
Open

[NEUTRAL] Update dependency eslint-plugin-import to ^2.9.0 #999

chore(deps): update dependency eslint-plugin-import to ^2.9.0
81adebe
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / WhiteSource Security Check failed Oct 17, 2024 in 47m 17s

Security Report

You have successfully remediated 1 vulnerabilities, but introduced 5 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue Reachability
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/net40/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/net20/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/net45/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/portable-net40+sl5+wp80+win8+wpa81/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182
CVE-2024-21907

Path to vulnerable library: /nuget/spec/fixtures/packages_configs/packages/Newtonsoft.Json.8.0.3/lib/portable-net45+wp80+win8+wpa81+dnxcore50/Newtonsoft.Json.dll

Dependency Hierarchy:

-> ❌ Newtonsoft.Json-8.0.3.19514.dll (Vulnerable Library)

High 7.5 Newtonsoft.Json-8.0.3.19514.dll Upgrade to version: Newtonsoft.Json - 13.0.1 #1182

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2021-32740 addressable-2.7.0.gem

Base branch total remaining vulnerabilities: 445
Base branch commit: ba8cd9078c8ce0cb202767d627706711237abf71


Total libraries scanned: 2346

Scan token: 4616167ec13f424f9c3ce4458f8b3f42

View more details on Mend for GitHub.com