mend-bolt-for-github[bot]

Vulnerable Library - react-redux-8.1.3.tgz Path to dependency file: /package.json Path to vulnerable library: /package.json ## Vulnerabilities | CVE | Severity | CVSS | Dependency | Type | Fixed in (react-redux...

Vulnerable Library - jinja2-3.1.5-py3-none-any.whl A very fast and expressive template engine. Library home page: https://files.pythonhosted.org/packages/bd/0f/2ba5fbcd631e3e88689309dbe978c5769e883e4b84ebfe7da30b43275c5a/jinja2-3.1.5-py3-none-any.whl Path to dependency file: /docs/requirements.txt Path to vulnerable library: /docs/requirements.txt ## Vulnerabilities | CVE |...

## CVE-2024-21538 - High Severity Vulnerability Vulnerable Library - cross-spawn-7.0.3.tgz Cross platform child_process#spawn and child_process#spawnSync Library home page: https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz Path to dependency file: /package.json Path to vulnerable library: /package.json,/frontend/node_modules/cross-spawn/package.json Dependency...

## CVE-2025-27789 - Medium Severity Vulnerability Vulnerable Libraries - runtime-7.16.3.tgz, runtime-7.15.4.tgz, runtime-7.20.1.tgz runtime-7.16.3.tgz babel's modular runtime helpers Library home page: https://registry.npmjs.org/@babel/runtime/-/runtime-7.16.3.tgz Path to dependency file: /package.json Path to vulnerable library:...

## WS-2023-0439 - High Severity Vulnerability Vulnerable Library - axios-0.21.4.tgz Promise based HTTP client for the browser and node.js Library home page: https://registry.npmjs.org/axios/-/axios-0.21.4.tgz Path to dependency file: /package.json Path to...

CVE-2022-46175 (High) detected in json5-2.2.0.tgz

1

## CVE-2022-46175 - High Severity Vulnerability Vulnerable Library - json5-2.2.0.tgz JSON for humans. Library home page: https://registry.npmjs.org/json5/-/json5-2.2.0.tgz Path to dependency file: /frontend/root-config/package.json Path to vulnerable library: /frontend/root-config/package.json Dependency Hierarchy: -...

CVE-2022-37603 (High) detected in loader-utils-2.0.1.tgz

1

## CVE-2022-37603 - High Severity Vulnerability Vulnerable Library - loader-utils-2.0.1.tgz utils for webpack loaders Library home page: https://registry.npmjs.org/loader-utils/-/loader-utils-2.0.1.tgz Path to dependency file: /frontend/root-config/package.json Path to vulnerable library: /frontend/root-config/package.json Dependency Hierarchy:...

## CVE-2024-53899 - High Severity Vulnerability Vulnerable Library - virtualenv-20.9.0-py2.py3-none-any.whl Virtual Python Environment builder Library home page: https://files.pythonhosted.org/packages/d2/cb/439d1952bc4cc5be2fb5c2551c94cb039323f2acdc45aa77a3f935d70b16/virtualenv-20.9.0-py2.py3-none-any.whl Path to dependency file: /backend/requirements.txt Path to vulnerable library: /backend/requirements.txt,/backend/requirements.txt Dependency Hierarchy:...

## CVE-2024-47874 - Low Severity Vulnerability Vulnerable Library - starlette-0.27.0-py3-none-any.whl The little ASGI library that shines. Library home page: https://files.pythonhosted.org/packages/58/f8/e2cca22387965584a409795913b774235752be4176d276714e15e1a58884/starlette-0.27.0-py3-none-any.whl Path to dependency file: /backend/requirements.txt Path to vulnerable library: /backend/requirements.txt,/backend/requirements.txt...

CVE-2022-37599 (High) detected in loader-utils-2.0.1.tgz

1

## CVE-2022-37599 - High Severity Vulnerability Vulnerable Library - loader-utils-2.0.1.tgz utils for webpack loaders Library home page: https://registry.npmjs.org/loader-utils/-/loader-utils-2.0.1.tgz Path to dependency file: /frontend/root-config/package.json Path to vulnerable library: /frontend/root-config/package.json Dependency Hierarchy:...