Skip to content

Update dependency underscore to v1.12.1

92df63a
Select commit
Loading
Failed to load commit list.
Open

Update dependency underscore to v1.12.1 #19

Update dependency underscore to v1.12.1
92df63a
Select commit
Loading
Failed to load commit list.
Dev - Mend for GitHub.com / Mend Security Check failed Mar 27, 2026 in 1m 55s

Security Report

You have successfully remediated 1 vulnerabilities, but introduced 2 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue
CVE-398484-724968

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> core-7.23.2.tgz (Root Library)

   -> debug-4.4.3.tgz

     -> ❌ ms-2.1.3.tgz (Vulnerable Library)

Critical 9.8 Transitive ms-2.1.3.tgz core-7.23.2.tgz None
CVE-2026-33750

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> forever-2.0.0.tgz (Root Library)

   -> forever-monitor-2.0.0.tgz

     -> minimatch-3.0.4.tgz

       -> ❌ brace-expansion-1.1.11.tgz (Vulnerable Library)

Medium 6.5 Transitive brace-expansion-1.1.11.tgz forever-2.0.0.tgz Transitive Upgrade to version brace-expansion - 5.0.5 or greater #3

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
CVE-2021-23358 underscore-1.9.1.tgz

Base branch total remaining vulnerabilities: 73
Base branch commit: 716fe17b8d26ad794de274101da05107a712797c


Total libraries scanned: 420

Scan token: d332f538d1804fdd8b0c26efae1eab4d