chore(deps): update loadgenerator #137
Merged
Mend for GitHub.com / Mend Security Check
failed
May 28, 2024 in 11m 30s
Security Report
You have successfully remediated 3 vulnerabilities, but introduced 1 new vulnerabilities in this branch.
❌ New vulnerabilities:
CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue |
---|---|---|---|---|---|
CVE-2023-36665Path to dependency file: /src/paymentservice/package.json Path to vulnerable library: /src/paymentservice/package.json,/src/frontend/package.json Dependency Hierarchy: -> ts-proto-1.163.0.tgz (Root Library) -> ❌ protobufjs-7.2.4.tgz (Vulnerable Library) |
Critical | 9.8 | protobufjs-7.2.4.tgz | Upgrade to version: protobufjs - 6.11.4,7.2.5 | None |
✔️ Remediated vulnerabilities:
CVE | Vulnerable Library |
---|---|
CVE-2024-35195 | requests-2.31.0-py3-none-any.whl |
CVE-2024-22195 | Jinja2-3.1.2-py3-none-any.whl |
CVE-2024-34064 | Jinja2-3.1.2-py3-none-any.whl |
Base branch total remaining vulnerabilities: 22
Base branch commit: bab993da9173f6a1f94aa0037659a182ecfe27fd
Total libraries scanned: 981
Scan token: b2dc7b627b8347cb8cb4247f50f3ce68
Loading