Skip to content

Remove `babel-core` dep and upgrade `babel-template` (#1095)

Mend for GitHub.com / Mend Security Check failed Nov 14, 2023 in 3m 51s

Security Report

The Security Check found 7 vulnerabilities.

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2023-45133

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> jest-cli-24.9.0.tgz (Root Library)

   -> jest-config-24.9.0.tgz

     -> jest-jasmine2-24.9.0.tgz

       -> ❌ traverse-7.18.11.tgz (Vulnerable Library)

High 8.8 traverse-7.18.11.tgz Upgrade to version: @babel/traverse - 7.23.2 #630
CVE-2023-45133

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> core-8.0.0.tgz (Root Library)

   -> core-7.21.4.tgz

     -> ❌ traverse-7.21.4.tgz (Vulnerable Library)

High 8.8 traverse-7.21.4.tgz Upgrade to version: @babel/traverse - 7.23.2 #1090
CVE-2023-45133

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> react-view-2.3.2.tgz (Root Library)

   -> ❌ traverse-7.12.10.tgz (Vulnerable Library)

High 8.8 traverse-7.12.10.tgz Upgrade to version: @babel/traverse - 7.23.2 #1089
CVE-2023-45857

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> start-server-and-test-2.0.0.tgz (Root Library)

   -> wait-on-7.0.1.tgz

     -> ❌ axios-0.27.2.tgz (Vulnerable Library)

High 7.5 axios-0.27.2.tgz Upgrade to version: axios - 1.6.0 #1149
CVE-2023-45857

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> codesandbox-2.2.3.tgz (Root Library)

   -> ❌ axios-0.22.0.tgz (Vulnerable Library)

High 7.5 axios-0.22.0.tgz Upgrade to version: axios - 1.6.0 #1148
CVE-2023-46234

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> eslint-import-resolver-webpack-0.13.0.tgz (Root Library)

   -> node-libs-browser-2.2.1.tgz

     -> crypto-browserify-3.12.0.tgz

       -> ❌ browserify-sign-4.0.4.tgz (Vulnerable Library)

Medium 6.5 browserify-sign-4.0.4.tgz Upgrade to version: browserify-sign - 4.2.2 #1150
CVE-2023-28155

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> jest-cli-24.9.0.tgz (Root Library)

   -> jest-config-24.9.0.tgz

     -> jest-environment-jsdom-24.9.0.tgz

       -> jsdom-11.12.0.tgz

         -> ❌ request-2.88.0.tgz (Vulnerable Library)

Medium 6.1 request-2.88.0.tgz #630

Total libraries scanned: 2345
Scan token: af832e2f9ddd498e84b85a5224c058f1