Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update module github.com/tdewolff/minify/v2 to v2.20.34 #21

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Update module github.com/tdewolff/minify/v2 to v2.20.34

2836c5f
Select commit
Failed to load commit list.
Open

Update module github.com/tdewolff/minify/v2 to v2.20.34 #21

Update module github.com/tdewolff/minify/v2 to v2.20.34
2836c5f
Select commit
Failed to load commit list.
Mend for GitHub.com / WhiteSource Security Check failed Jun 11, 2024 in 1m 36s

Security Report

You have successfully remediated 5 vulnerabilities, but introduced 1 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2023-42821

Path to dependency file: /go.mod

Path to vulnerable library: /go.mod

Dependency Hierarchy:

-> ❌ github.com/gomarkdown/markdown-v0.0.0-20221013030248-663e2500819c (Vulnerable Library)

High 7.5 github.com/gomarkdown/markdown-v0.0.0-20221013030248-663e2500819c None

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2022-31129 github.com/tdewolff/Minify/v2-v2.9.21
CVE-2020-11023 github.com/tdewolff/Minify/v2-v2.9.21
CVE-2022-24785 github.com/tdewolff/Minify/v2-v2.9.21
CVE-2020-11022 github.com/tdewolff/Minify/v2-v2.9.21
CVE-2019-11358 github.com/tdewolff/Minify/v2-v2.9.21

Base branch total remaining vulnerabilities: 5
Base branch commit: null


Total libraries scanned: 8

Scan token: 36da84a134514ef4ba5747f28309e27b