mend-bolt-for-github[bot]

## CVE-2024-43796 - Medium Severity Vulnerability Vulnerable Library - express-4.17.1.tgz Fast, unopinionated, minimalist web framework Library home page: https://registry.npmjs.org/express/-/express-4.17.1.tgz Dependency Hierarchy: - webpack-dev-server-4.2.1.tgz (Root Library) - :x: **express-4.17.1.tgz** (Vulnerable Library)...

## CVE-2024-43799 - Medium Severity Vulnerability Vulnerable Library - send-0.17.1.tgz Better streaming static file server with Range and conditional-GET support Library home page: https://registry.npmjs.org/send/-/send-0.17.1.tgz Dependency Hierarchy: - webpack-dev-server-4.2.1.tgz (Root Library)...

## CVE-2024-45296 - High Severity Vulnerability Vulnerable Libraries - path-to-regexp-0.1.7.tgz, path-to-regexp-2.2.1.tgz path-to-regexp-0.1.7.tgz Express style path to RegExp utility Library home page: https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz Dependency Hierarchy: - webpack-dev-server-4.2.1.tgz (Root Library) - express-4.17.1.tgz...

## CVE-2024-43788 - Medium Severity Vulnerability Vulnerable Library - webpack-5.53.0.tgz Packs CommonJs/AMD modules for the browser. Allows to split your codebase into multiple bundles, which can be loaded on demand....

CVE-2022-24785 (High) detected in moment-2.10.6.js

2

## CVE-2022-24785 - High Severity Vulnerability Vulnerable Library - moment-2.10.6.js Parse, validate, manipulate, and display dates Library home page: https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.10.6/moment.js Path to vulnerable library: /Modules/CodeCamp/Scripts/moment/moment.js Dependency Hierarchy: - :x: **moment-2.10.6.js**...

CVE-2022-31129 (High) detected in moment-2.10.6.js

2

## CVE-2022-31129 - High Severity Vulnerability Vulnerable Library - moment-2.10.6.js Parse, validate, manipulate, and display dates Library home page: https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.10.6/moment.js Path to vulnerable library: /Modules/CodeCamp/Scripts/moment/moment.js Dependency Hierarchy: - :x: **moment-2.10.6.js**...

WS-2016-0075 (Medium) detected in moment-2.10.6.js

2

## WS-2016-0075 - Medium Severity Vulnerability Vulnerable Library - moment-2.10.6.js Parse, validate, manipulate, and display dates Library home page: https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.10.6/moment.js Path to vulnerable library: /Modules/CodeCamp/Scripts/moment/moment.js Dependency Hierarchy: - :x: **moment-2.10.6.js**...

CVE-2024-43799 (Medium) detected in send-0.18.0.tgz

1

## CVE-2024-43799 - Medium Severity Vulnerability Vulnerable Library - send-0.18.0.tgz Better streaming static file server with Range and conditional-GET support Library home page: https://registry.npmjs.org/send/-/send-0.18.0.tgz Path to dependency file: /package.json Path...

CVE-2024-45590 (High) detected in body-parser-1.20.1.tgz

1

## CVE-2024-45590 - High Severity Vulnerability Vulnerable Library - body-parser-1.20.1.tgz Node.js body parsing middleware Library home page: https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy:...

CVE-2024-43800 (Medium) detected in serve-static-1.15.0.tgz

1

## CVE-2024-43800 - Medium Severity Vulnerability Vulnerable Library - serve-static-1.15.0.tgz Serve static files Library home page: https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz Path to dependency file: /package.json Path to vulnerable library: /home/wss-scanner/.yarn/berry/cache/serve-static-npm-1.15.0-86c81879f5-10c0.zip Dependency Hierarchy: -...