Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update github.com/dop251/goja digest to 5ef83b8 #43

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Update github.com/dop251/goja digest to 5ef83b8

5e428f2
Select commit
Loading
Failed to load commit list.
Open

Update github.com/dop251/goja digest to 5ef83b8 #43

Update github.com/dop251/goja digest to 5ef83b8
5e428f2
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / WhiteSource Security Check failed Jan 26, 2025 in 6m 19s

Security Report

3 new vulnerabilities were introduced in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2023-42821

Path to dependency file: /go.mod

Path to vulnerable library: /go.mod

Dependency Hierarchy:

-> ❌ github.com/gomarkdown/markdown-v0.0.0-20221013030248-663e2500819c (Vulnerable Library)

High 7.5 github.com/gomarkdown/markdown-v0.0.0-20221013030248-663e2500819c None
CVE-2015-9251

Path to dependency file: /go.mod

Path to vulnerable library: /go.mod

Dependency Hierarchy:

-> ❌ github.com/tdewolff/Minify/v2-v2.9.21 (Vulnerable Library)

Medium 6.1 github.com/tdewolff/Minify/v2-v2.9.21 Upgrade to version: jQuery - 3.0.0 #33
CVE-2024-44337

Path to dependency file: /go.mod

Path to vulnerable library: /go.mod

Dependency Hierarchy:

-> ❌ github.com/gomarkdown/markdown-v0.0.0-20221013030248-663e2500819c (Vulnerable Library)

Medium 5.1 github.com/gomarkdown/markdown-v0.0.0-20221013030248-663e2500819c Upgrade to version: github.com/gomarkdown/markdown-a2a9c4f76ef5a5c32108e36f7c47f8d310322252 None

Base branch total remaining vulnerabilities: 9
Base branch commit: null


Total libraries scanned: 8

Scan token: 4b80d09c84114ca7a6d263fcf3a0a4af