mend-for-github-com[bot]

## CVE-2025-6545 - Critical Severity Vulnerability Vulnerable Library - pbkdf2-3.1.2.tgz This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes() Library...

## CVE-2025-6547 - Medium Severity Vulnerability Vulnerable Library - pbkdf2-3.1.2.tgz This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes() Library...

## CVE-2025-48387 - High Severity Vulnerability Vulnerable Libraries - tar-fs-3.0.8.tgz, tar-fs-2.1.2.tgz tar-fs-3.0.8.tgz filesystem bindings for tar-stream Library home page: https://registry.npmjs.org/tar-fs/-/tar-fs-3.0.8.tgz Path to dependency file: /package.json Path to vulnerable library: /package.json...

## CVE-2025-46653 - Low Severity Vulnerability Vulnerable Library - formidable-2.1.2.tgz A node.js module for parsing form data, especially file uploads. Library home page: https://registry.npmjs.org/formidable/-/formidable-2.1.2.tgz Path to dependency file: /package.json Path...

## CVE-2024-29180 - High Severity Vulnerability Vulnerable Library - webpack-dev-middleware-3.7.3.tgz A development middleware for webpack Library home page: https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-3.7.3.tgz Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency...

CVE-2024-29415 (Critical) detected in ip-2.0.1.tgz

1

## CVE-2024-29415 - Critical Severity Vulnerability Vulnerable Library - ip-2.0.1.tgz Library home page: https://registry.npmjs.org/ip/-/ip-2.0.1.tgz Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: - @osd/storybook-1.0.0.tgz (Root Library)...

CVE-2024-43799 (Medium) detected in send-0.17.1.tgz

1

## CVE-2024-43799 - Medium Severity Vulnerability Vulnerable Library - send-0.17.1.tgz Better streaming static file server with Range and conditional-GET support Library home page: https://registry.npmjs.org/send/-/send-0.17.1.tgz Path to dependency file: /package.json Path...

CVE-2024-43800 (Medium) detected in serve-static-1.14.1.tgz

1

## CVE-2024-43800 - Medium Severity Vulnerability Vulnerable Library - serve-static-1.14.1.tgz Serve static files Library home page: https://registry.npmjs.org/serve-static/-/serve-static-1.14.1.tgz Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -...

CVE-2021-33623 (High) detected in trim-newlines-1.0.0.tgz

1

## CVE-2021-33623 - High Severity Vulnerability Vulnerable Library - trim-newlines-1.0.0.tgz Trim newlines from the start and/or end of a string Library home page: https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz Path to dependency file: /package.json Path...

CVE-2024-11831 (Medium) detected in serialize-javascript-4.0.0.tgz, serialize-javascript-5.0.1.tgz

1

## CVE-2024-11831 - Medium Severity Vulnerability Vulnerable Libraries - serialize-javascript-4.0.0.tgz, serialize-javascript-5.0.1.tgz serialize-javascript-4.0.0.tgz Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Library home page: https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-4.0.0.tgz Path...