Skip to content

Update dependency underscore to v1.12.1 #19

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dev-mend-for-github-com wants to merge 1 commit into
base: main
Choose a base branch
from

Update dependency underscore to v1.12.1

9b280ce
Select commit
Loading
Failed to load commit list.
Open

Update dependency underscore to v1.12.1 #19

Update dependency underscore to v1.12.1
9b280ce
Select commit
Loading
Failed to load commit list.
Dev - Mend for GitHub.com / Mend Security Check failed Dec 19, 2025 in 1m 5s

Security Report

You have successfully remediated 3 vulnerabilities, but introduced 1 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue
CVE-398484-724968

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> core-7.23.2.tgz (Root Library)

   -> traverse-7.28.5.tgz

     -> debug-4.4.3.tgz

       -> ❌ ms-2.1.3.tgz (Vulnerable Library)

Critical 9.8 Transitive ms-2.1.3.tgz core-7.23.2.tgz None

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
CVE-2021-23358 underscore-1.9.1.tgz
CVE-2019-10746 mixin-deep-1.3.1.tgz
CVE-2019-10747 set-value-2.0.0.tgz

Base branch total remaining vulnerabilities: 60
Base branch commit: 40ef54a0072d8b6fc440581d0e2406693e278bac


Total libraries scanned: 420

Scan token: bdebc55b34884fa69cbd56fe2d53afb3

View more details on Dev - Mend for GitHub.com