Skip to content

Dependency vulnerabilities detected - 2026-06-29 #561

Open
Open
Dependency vulnerabilities detected - 2026-06-29#561
Labels
dependenciessecurity

Description

@github-actions
github-actions
bot
opened on Jun 29, 2026

Dependency Vulnerability Report

Scanned at: 2026-06-29T13:13:24.151Z

Blocking vulnerabilities: 48
License findings: 3

Vulnerabilities

Ecosystem Package Severity Advisory Remediation SLA
backend @ethersproject/abi low 2026-09-27T13:13:24.147Z
backend @ethersproject/abstract-provider low 2026-09-27T13:13:24.148Z
backend @ethersproject/abstract-signer low 2026-09-27T13:13:24.148Z
backend @ethersproject/contracts low 2026-09-27T13:13:24.148Z
backend @ethersproject/hash low 2026-09-27T13:13:24.148Z
backend @ethersproject/hdnode low 2026-09-27T13:13:24.148Z
backend @ethersproject/json-wallets low 2026-09-27T13:13:24.148Z
backend @ethersproject/providers moderate 2026-08-28T13:13:24.148Z
backend @ethersproject/signing-key low 2026-09-27T13:13:24.148Z
backend @ethersproject/transactions low 2026-09-27T13:13:24.148Z
backend @ethersproject/wallet low 2026-09-27T13:13:24.148Z
backend @ethersproject/wordlists low 2026-09-27T13:13:24.148Z
backend @opentelemetry/core moderate 1120821 2026-08-28T13:13:24.148Z
backend @opentelemetry/resources moderate 2026-08-28T13:13:24.148Z
backend @opentelemetry/sdk-trace-base moderate 2026-08-28T13:13:24.148Z
backend @redocly/openapi-core moderate 2026-08-28T13:13:24.148Z
backend autocannon moderate 2026-08-28T13:13:24.148Z
backend axios high 1116673 2026-07-29T13:13:24.148Z
backend bfj high 2026-07-29T13:13:24.148Z
backend body-parser moderate 2026-08-28T13:13:24.148Z
backend brace-expansion moderate 1115540 2026-08-28T13:13:24.148Z
backend dompurify moderate 1120800 2026-08-28T13:13:24.148Z
backend elliptic low 1112030 2026-09-27T13:13:24.148Z
backend esbuild low 1120680 2026-09-27T13:13:24.148Z
backend ethers moderate 2026-08-28T13:13:24.148Z
backend express moderate 2026-08-28T13:13:24.148Z
backend follow-redirects moderate 1116560 2026-08-28T13:13:24.148Z
backend form-data high 1120743 2026-07-29T13:13:24.148Z
backend hyperid moderate 2026-08-28T13:13:24.148Z
backend js-yaml moderate 1120792 2026-08-28T13:13:24.148Z
backend jsonpath high 2026-07-29T13:13:24.148Z
backend node-cron moderate 2026-08-28T13:13:24.148Z
backend path-to-regexp high 1115527 2026-07-29T13:13:24.148Z
backend picomatch high 1115551 2026-07-29T13:13:24.148Z
backend postcss moderate 1117015 2026-08-28T13:13:24.148Z
backend qs moderate 1119502 2026-08-28T13:13:24.148Z
backend sanitize-html critical 1120694 2026-07-06T13:13:24.148Z
backend underscore high 1117689 2026-07-29T13:13:24.148Z
backend uuid moderate 1119441 2026-08-28T13:13:24.148Z
backend viem high 2026-07-29T13:13:24.148Z
backend vite high 1116231 2026-07-29T13:13:24.148Z
backend ws high 1119108 2026-07-29T13:13:24.148Z
contracts-evm @ethersproject/abi low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/abstract-provider low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/abstract-signer low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/contracts low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/hash low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/hdnode low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/json-wallets low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/providers moderate 2026-08-28T13:13:24.149Z
contracts-evm @ethersproject/signing-key low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/transactions low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/wallet low 2026-09-27T13:13:24.149Z
contracts-evm @ethersproject/wordlists low 2026-09-27T13:13:24.149Z
contracts-evm @nomicfoundation/hardhat-chai-matchers moderate 2026-08-28T13:13:24.149Z
contracts-evm @nomicfoundation/hardhat-ethers moderate 2026-08-28T13:13:24.149Z
contracts-evm @nomicfoundation/hardhat-ignition moderate 2026-08-28T13:13:24.149Z
contracts-evm @nomicfoundation/hardhat-ignition-ethers moderate 2026-08-28T13:13:24.149Z
contracts-evm @nomicfoundation/hardhat-network-helpers moderate 2026-08-28T13:13:24.149Z
contracts-evm @nomicfoundation/hardhat-toolbox moderate 2026-08-28T13:13:24.149Z
contracts-evm @nomicfoundation/hardhat-verify moderate 2026-08-28T13:13:24.149Z
contracts-evm @nomicfoundation/ignition-core moderate 2026-08-28T13:13:24.149Z
contracts-evm @openzeppelin/hardhat-upgrades moderate 2026-08-28T13:13:24.149Z
contracts-evm @openzeppelin/upgrades-core low 2026-09-27T13:13:24.149Z
contracts-evm @sentry/node low 2026-09-27T13:13:24.149Z
contracts-evm @typechain/hardhat moderate 2026-08-28T13:13:24.149Z
contracts-evm amazon-cognito-identity-js high 2026-07-29T13:13:24.149Z
contracts-evm axios high 1116673 2026-07-29T13:13:24.149Z
contracts-evm bn.js moderate 1113442 2026-08-28T13:13:24.149Z
contracts-evm brace-expansion moderate 1115540 2026-08-28T13:13:24.149Z
contracts-evm cookie low 1103907 2026-09-27T13:13:24.149Z
contracts-evm elliptic low 1112030 2026-09-27T13:13:24.149Z
contracts-evm eth-gas-reporter moderate 2026-08-28T13:13:24.149Z
contracts-evm ethereum-cryptography low 2026-09-27T13:13:24.149Z
contracts-evm ethereumjs-util low 2026-09-27T13:13:24.149Z
contracts-evm ethers moderate 2026-08-28T13:13:24.149Z
contracts-evm ethjs-unit moderate 2026-08-28T13:13:24.149Z
contracts-evm fast-uri high 1117870 2026-07-29T13:13:24.149Z
contracts-evm fast-xml-builder high 1118965 2026-07-29T13:13:24.149Z
contracts-evm form-data high 1120743 2026-07-29T13:13:24.149Z
contracts-evm hardhat moderate 2026-08-28T13:13:24.149Z
contracts-evm js-cookie high 1120607 2026-07-29T13:13:24.149Z
contracts-evm js-yaml moderate 1120792 2026-08-28T13:13:24.149Z
contracts-evm lodash high 1115806 2026-07-29T13:13:24.149Z
contracts-evm mocha moderate 2026-08-28T13:13:24.149Z
contracts-evm number-to-bn moderate 2026-08-28T13:13:24.149Z
contracts-evm qs moderate 1119502 2026-08-28T13:13:24.149Z
contracts-evm sc-istanbul moderate 2026-08-28T13:13:24.149Z
contracts-evm secp256k1 low 2026-09-27T13:13:24.149Z
contracts-evm serialize-javascript high 1113686 2026-07-29T13:13:24.149Z
contracts-evm solc low 2026-09-27T13:13:24.149Z
contracts-evm solidity-coverage moderate 2026-08-28T13:13:24.149Z
contracts-evm tmp high 1109537 2026-07-29T13:13:24.149Z
contracts-evm undici high 1112496 2026-07-29T13:13:24.149Z
contracts-evm uuid moderate 1119441 2026-08-28T13:13:24.149Z
contracts-evm web3-utils moderate 2026-08-28T13:13:24.149Z
contracts-evm ws high 1119108 2026-07-29T13:13:24.149Z
frontend @babel/core low 1120793 2026-09-27T13:13:24.149Z
frontend @metamask/abi-utils moderate 2026-08-28T13:13:24.149Z
frontend @metamask/delegation-core moderate 2026-08-28T13:13:24.149Z
frontend @metamask/rpc-errors moderate 2026-08-28T13:13:24.149Z
frontend @metamask/sdk moderate 2026-08-28T13:13:24.149Z
frontend @metamask/sdk-communication-layer moderate 2026-08-28T13:13:24.149Z
frontend @metamask/smart-accounts-kit moderate 2026-08-28T13:13:24.149Z
frontend @metamask/utils moderate 2026-08-28T13:13:24.149Z
frontend @reown/appkit moderate 2026-08-28T13:13:24.149Z
frontend @reown/appkit-controllers moderate 2026-08-28T13:13:24.149Z
frontend @reown/appkit-pay moderate 2026-08-28T13:13:24.149Z
frontend @reown/appkit-scaffold-ui moderate 2026-08-28T13:13:24.149Z
frontend @reown/appkit-ui moderate 2026-08-28T13:13:24.149Z
frontend @reown/appkit-utils moderate 2026-08-28T13:13:24.149Z
frontend @segment/analytics-next high 2026-07-29T13:13:24.149Z
frontend @solana/web3.js moderate 2026-08-28T13:13:24.149Z
frontend @toruslabs/base-controllers low 2026-09-27T13:13:24.149Z
frontend @toruslabs/broadcast-channel low 2026-09-27T13:13:24.149Z
frontend @toruslabs/customauth low 2026-09-27T13:13:24.149Z
frontend @toruslabs/eccrypto low 2026-09-27T13:13:24.149Z
frontend @toruslabs/ethereum-controllers moderate 2026-08-28T13:13:24.149Z
frontend @toruslabs/metadata-helpers low 2026-09-27T13:13:24.149Z
frontend @toruslabs/openlogin low 2026-09-27T13:13:24.149Z
frontend @toruslabs/openlogin-session-manager low 2026-09-27T13:13:24.149Z
frontend @toruslabs/secure-pub-sub low 2026-09-27T13:13:24.149Z
frontend @toruslabs/session-manager low 2026-09-27T13:13:24.149Z
frontend @toruslabs/starkware-crypto low 2026-09-27T13:13:24.149Z
frontend @toruslabs/torus.js low 2026-09-27T13:13:24.149Z
frontend @walletconnect/core moderate 2026-08-28T13:13:24.149Z
frontend @walletconnect/ethereum-provider moderate 2026-08-28T13:13:24.149Z
frontend @walletconnect/sign-client moderate 2026-08-28T13:13:24.149Z
frontend @walletconnect/universal-provider moderate 2026-08-28T13:13:24.150Z
frontend @walletconnect/utils moderate 2026-08-28T13:13:24.150Z
frontend @web3auth/auth low 2026-09-27T13:13:24.150Z
frontend @web3auth/base low 2026-09-27T13:13:24.150Z
frontend @web3auth/base-provider low 2026-09-27T13:13:24.150Z
frontend @web3auth/ethereum-provider low 2026-09-27T13:13:24.150Z
frontend @web3auth/modal moderate 2026-08-28T13:13:24.150Z
frontend @web3auth/no-modal high 2026-07-29T13:13:24.150Z
frontend @web3auth/ws-embed low 2026-09-27T13:13:24.150Z
frontend bip32 low 2026-09-27T13:13:24.150Z
frontend brace-expansion moderate 1115540 2026-08-28T13:13:24.150Z
frontend defu high 1116102 2026-07-29T13:13:24.150Z
frontend elliptic low 1112030 2026-09-27T13:13:24.150Z
frontend engine.io-client moderate 2026-08-28T13:13:24.150Z
frontend esbuild low 1120680 2026-09-27T13:13:24.150Z
frontend ethers moderate 2026-08-28T13:13:24.150Z
frontend form-data high 1120743 2026-07-29T13:13:24.150Z
frontend jayson moderate 2026-08-28T13:13:24.150Z
frontend js-cookie high 1120607 2026-07-29T13:13:24.150Z
frontend js-yaml moderate 1120792 2026-08-28T13:13:24.150Z
frontend lodash high 1115806 2026-07-29T13:13:24.150Z
frontend next high 1116375 2026-07-29T13:13:24.150Z
frontend postcss moderate 1117015 2026-08-28T13:13:24.150Z
frontend ripple-keypairs low 2026-09-27T13:13:24.150Z
frontend tiny-secp256k1 low 2026-09-27T13:13:24.150Z
frontend uuid moderate 1119441 2026-08-28T13:13:24.150Z
frontend viem moderate 2026-08-28T13:13:24.150Z
frontend vite high 1116230 2026-07-29T13:13:24.150Z
frontend ws high 1119108 2026-07-29T13:13:24.150Z
frontend xrpl low 2026-09-27T13:13:24.150Z
packages-sdk vite high 1120786 2026-07-29T13:13:24.150Z
root @babel/core low 1120793 2026-09-27T13:13:24.150Z
root @coinbase/cdp-sdk high 2026-07-29T13:13:24.150Z
root @coinbase/wallet-sdk high 1112257 2026-07-29T13:13:24.150Z
root @ethersproject/abi low 2026-09-27T13:13:24.150Z
root @ethersproject/abstract-provider low 2026-09-27T13:13:24.150Z
root @ethersproject/abstract-signer low 2026-09-27T13:13:24.150Z
root @ethersproject/contracts low 2026-09-27T13:13:24.150Z
root @ethersproject/hash low 2026-09-27T13:13:24.150Z
root @ethersproject/hdnode low 2026-09-27T13:13:24.150Z
root @ethersproject/json-wallets low 2026-09-27T13:13:24.150Z
root @ethersproject/providers moderate 2026-08-28T13:13:24.150Z
root @ethersproject/signing-key low 2026-09-27T13:13:24.150Z
root @ethersproject/transactions low 2026-09-27T13:13:24.150Z
root @ethersproject/wallet low 2026-09-27T13:13:24.150Z
root @ethersproject/wordlists low 2026-09-27T13:13:24.150Z
root @metamask/abi-utils moderate 2026-08-28T13:13:24.150Z
root @metamask/delegation-core moderate 2026-08-28T13:13:24.150Z
root @metamask/rpc-errors moderate 2026-08-28T13:13:24.150Z
root @metamask/sdk moderate 2026-08-28T13:13:24.150Z
root @metamask/sdk-communication-layer moderate 2026-08-28T13:13:24.150Z
root @metamask/smart-accounts-kit moderate 2026-08-28T13:13:24.150Z
root @metamask/utils moderate 2026-08-28T13:13:24.150Z
root @opentelemetry/core moderate 1120821 2026-08-28T13:13:24.150Z
root @opentelemetry/instrumentation-http moderate 2026-08-28T13:13:24.150Z
root @opentelemetry/resources moderate 2026-08-28T13:13:24.150Z
root @opentelemetry/sdk-trace-base moderate 2026-08-28T13:13:24.150Z
root @redocly/openapi-core moderate 2026-08-28T13:13:24.150Z
root @segment/analytics-next high 2026-07-29T13:13:24.150Z
root @sentry/nextjs moderate 2026-08-28T13:13:24.150Z
root @sentry/node moderate 2026-08-28T13:13:24.150Z
root @sentry/profiling-node moderate 2026-08-28T13:13:24.150Z
root @solana/web3.js moderate 2026-08-28T13:13:24.150Z
root @stablelib/ed25519 moderate 1116139 2026-08-28T13:13:24.150Z
root @toruslabs/base-controllers low 2026-09-27T13:13:24.150Z
root @toruslabs/broadcast-channel low 2026-09-27T13:13:24.150Z
root @toruslabs/customauth low 2026-09-27T13:13:24.150Z
root @toruslabs/eccrypto low 2026-09-27T13:13:24.150Z
root @toruslabs/ethereum-controllers moderate 2026-08-28T13:13:24.150Z
root @toruslabs/metadata-helpers low 2026-09-27T13:13:24.150Z
root @toruslabs/openlogin low 2026-09-27T13:13:24.150Z
root @toruslabs/openlogin-session-manager low 2026-09-27T13:13:24.150Z
root @toruslabs/secure-pub-sub low 2026-09-27T13:13:24.150Z
root @toruslabs/session-manager low 2026-09-27T13:13:24.150Z
root @toruslabs/starkware-crypto low 2026-09-27T13:13:24.150Z
root @toruslabs/torus.js low 2026-09-27T13:13:24.150Z
root @walletconnect/core moderate 2026-08-28T13:13:24.150Z
root @walletconnect/ethereum-provider low 2026-09-27T13:13:24.150Z
root @walletconnect/relay-auth moderate 2026-08-28T13:13:24.150Z
root @walletconnect/sign-client moderate 2026-08-28T13:13:24.150Z
root @walletconnect/universal-provider low 2026-09-27T13:13:24.150Z
root @walletconnect/utils moderate 2026-08-28T13:13:24.150Z
root @web3auth/auth low 2026-09-27T13:13:24.150Z
root @web3auth/base low 2026-09-27T13:13:24.150Z
root @web3auth/base-provider low 2026-09-27T13:13:24.150Z
root @web3auth/ethereum-provider low 2026-09-27T13:13:24.150Z
root @web3auth/modal moderate 2026-08-28T13:13:24.150Z
root @web3auth/no-modal high 2026-07-29T13:13:24.150Z
root @web3auth/ws-embed low 2026-09-27T13:13:24.150Z
root @web3modal/base low 2026-09-27T13:13:24.150Z
root @web3modal/ethers high 2026-07-29T13:13:24.150Z
root @web3modal/scaffold-ui low 2026-09-27T13:13:24.150Z
root @web3modal/siwe low 2026-09-27T13:13:24.150Z
root autocannon moderate 2026-08-28T13:13:24.150Z
root axios high 1116673 2026-07-29T13:13:24.150Z
root bfj high 2026-07-29T13:13:24.150Z
root bip32 low 2026-09-27T13:13:24.150Z
root brace-expansion moderate 1120311 2026-08-28T13:13:24.150Z
root dompurify moderate 1120800 2026-08-28T13:13:24.150Z
root elliptic low 1112030 2026-09-27T13:13:24.150Z
root engine.io-client moderate 2026-08-28T13:13:24.150Z
root esbuild low 1120680 2026-09-27T13:13:24.150Z
root ethers moderate 2026-08-28T13:13:24.150Z
root express moderate 2026-08-28T13:13:24.150Z
root fast-uri high 1117870 2026-07-29T13:13:24.150Z
root form-data high 1120743 2026-07-29T13:13:24.150Z
root hyperid moderate 2026-08-28T13:13:24.150Z
root jayson moderate 2026-08-28T13:13:24.150Z
root js-cookie high 1120607 2026-07-29T13:13:24.150Z
root js-yaml moderate 1120792 2026-08-28T13:13:24.150Z
root jsonpath high 2026-07-29T13:13:24.150Z
root next high 1117930 2026-07-29T13:13:24.150Z
root node-cron moderate 2026-08-28T13:13:24.150Z
root postcss moderate 1117015 2026-08-28T13:13:24.150Z
root prismjs moderate 1105770 2026-08-28T13:13:24.151Z
root qs moderate 1119502 2026-08-28T13:13:24.151Z
root react-syntax-highlighter moderate 2026-08-28T13:13:24.151Z
root refractor moderate 2026-08-28T13:13:24.151Z
root ripple-keypairs low 2026-09-27T13:13:24.151Z
root sanitize-html critical 1120694 2026-07-06T13:13:24.151Z
root tiny-secp256k1 low 2026-09-27T13:13:24.151Z
root turbo moderate 1119386 2026-08-28T13:13:24.151Z
root underscore high 1117689 2026-07-29T13:13:24.151Z
root uuid moderate 1119441 2026-08-28T13:13:24.151Z
root viem moderate 2026-08-28T13:13:24.151Z
root vite high 1120784 2026-07-29T13:13:24.151Z
root ws high 1119108 2026-07-29T13:13:24.151Z
root xrpl low 2026-09-27T13:13:24.151Z

License Findings

  • agenticpay-backend@0.1.0: UNKNOWN
  • agenticpay-contracts-evm@0.1.0: UNLICENSED
  • agenticpay-frontend@0.1.0: UNLICENSED

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependenciessecurity

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions