Mend for GitHub.com / WhiteSource Security Check
failed
Apr 18, 2024 in 9m 34s
Security Report
You have successfully remediated 7 vulnerabilities, but introduced 3 new vulnerabilities in this branch.
❌ New vulnerabilities:
CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue |
---|---|---|---|---|---|
WS-2017-3772Vulnerable Source Files: ❌ /packages/osd-ui-framework/node_modules/underscore.string/unescapeHTML.js |
High | 7.5 | juice-shopjuice-shop-14.0.0_node14_darwin_x64 | Upgrade to version: underscore.string - 3.3.5 | #4734 |
CVE-2023-26156Path to dependency file: /package.json Path to vulnerable library: /node_modules/chromedriver/package.json Dependency Hierarchy: -> ❌ chromedriver-107.0.3.tgz (Vulnerable Library) |
High | 7.5 | chromedriver-107.0.3.tgz | Upgrade to version: chromedriver - 119.0.1 | None |
High | 7.5 | lportalliferay-ce-portal-src-7.3.5-ga6-20200930172312275 | Upgrade to version: 6.0.3 | #4726 |
✔️ Remediated vulnerabilities:
CVE | Vulnerable Library |
---|---|
CVE-2015-9251 | jquery-1.11.1.js |
CVE-2019-20149 | juice-shop-juice-shop-15.2.0_node16_win32_x64 |
WS-2017-3772 | underscore.string-3.3.6 |
CVE-2019-11358 | jquery-1.11.1.js |
CVE-2020-11022 | jquery-1.11.1.js |
CVE-2023-28155 | request-2.88.12.tgz |
CVE-2020-11023 | jquery-1.11.1.js |
Base branch total remaining vulnerabilities: 18
Base branch commit: 9408e4986f21d6ea7d2958707448e1604702f3df
Total libraries scanned: 2516
Scan token: 58aaeb1015d144a0a08dae5a3763fa04
Loading