Update dependency cmake-js to v8#12
Security Report
You have successfully remediated 17 vulnerabilities, but introduced 3 new vulnerabilities in this branch.
❌ New vulnerabilities:
| Vulnerability | Severity | Vulnerable Library | Direct Library | Suggested Fix | Issue | |
|---|---|---|---|---|---|---|
CVE-941441-362681Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json Dependency Hierarchy: -> core-2.0.0-alpha.64.tgz (Root Library) -> shelljs-0.8.4.tgz -> glob-7.1.6.tgz -> ❌ once-1.4.0.tgz (Vulnerable Library) |
9.8 | Transitive once-1.4.0.tgz |
core-2.0.0-alpha.64.tgz | None | ||
CVE-941441-362681Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json Dependency Hierarchy: -> preset-classic-2.0.0-alpha.64.tgz (Root Library) -> plugin-content-docs-2.0.0-alpha.64.tgz -> execa-3.4.0.tgz -> get-stream-5.2.0.tgz -> pump-3.0.0.tgz -> ❌ once-1.4.0.tgz (Vulnerable Library) |
9.8 | Transitive once-1.4.0.tgz |
preset-classic-2.0.0-alpha.64.tgz | None | ||
CVE-398484-724968Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> cmake-js-8.0.0.tgz (Root Library) -> debug-4.4.3.tgz -> ❌ ms-2.1.3.tgz (Vulnerable Library) |
9.8 | Transitive ms-2.1.3.tgz |
cmake-js-8.0.0.tgz | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2022-0155 | follow-redirects-1.14.1.tgz |
| CVE-2026-23950 | tar-4.4.19.tgz |
| CVE-2025-62718 | axios-0.21.1.tgz |
| CVE-2026-40175 | axios-0.21.1.tgz |
| CVE-2026-24842 | tar-4.4.19.tgz |
| CVE-495493-603164 | delegates-1.0.0.tgz |
| CVE-2022-25881 | http-cache-semantics-4.1.0.tgz |
| CVE-2021-3749 | axios-0.21.1.tgz |
| CVE-2026-2950 | lodash-4.17.21.tgz |
| CVE-2023-45857 | axios-0.21.1.tgz |
| CVE-2022-0536 | follow-redirects-1.14.1.tgz |
| CVE-121740-819191 | lodash-4.17.21.tgz |
| CVE-2026-39865 | axios-0.21.1.tgz |
| WS-2023-0439 | axios-0.21.1.tgz |
| CVE-2025-58754 | axios-0.21.1.tgz |
| CVE-2026-25639 | axios-0.21.1.tgz |
| CVE-2026-4800 | lodash-4.17.21.tgz |
Base branch total remaining vulnerabilities: 202
Base branch commit: null
Total libraries scanned: 1429
Scan token: dca969834a504f93ae3485850881ae4d