Update dependency firebase-functions to v3.8.0 #68
Security Report
3 new vulnerabilities were introduced in this branch.
❌ New vulnerabilities:
CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue |
---|---|---|---|---|---|
CVE-2024-43800Path to dependency file: /frontend/package.json Path to vulnerable library: /frontend/package.json Dependency Hierarchy: -> react-scripts-3.4.1.tgz (Root Library) -> webpack-dev-server-3.10.3.tgz -> express-4.17.1.tgz -> ❌ serve-static-1.14.1.tgz (Vulnerable Library) |
Medium | 5.0 | serve-static-1.14.1.tgz | Upgrade to version: serve-static - 1.16.0,2.1.0 | #6 |
CVE-2024-43799Path to dependency file: /frontend/package.json Path to vulnerable library: /frontend/package.json Dependency Hierarchy: -> react-scripts-3.4.1.tgz (Root Library) -> webpack-dev-server-3.10.3.tgz -> express-4.17.1.tgz -> ❌ send-0.17.1.tgz (Vulnerable Library) |
Medium | 5.0 | send-0.17.1.tgz | Upgrade to version: send - 0.19.0 | #6 |
CVE-2024-43796Path to dependency file: /frontend/package.json Path to vulnerable library: /frontend/package.json Dependency Hierarchy: -> react-scripts-3.4.1.tgz (Root Library) -> webpack-dev-server-3.10.3.tgz -> ❌ express-4.17.1.tgz (Vulnerable Library) |
Medium | 5.0 | express-4.17.1.tgz | Upgrade to version: express - 4.20.0,5.0.0 | #6 |
Base branch total remaining vulnerabilities: 150
Base branch commit: null
Total libraries scanned: 1737
Scan token: 429d4cb9fe604b7a96dea4dc9f07b77b