mend-for-github-com[bot] issues

Results 1661 issues of


                                            mend-for-github-com[bot]

temporal-spring-boot-autoconfigure-alpha-1.17.0-SNAPSHOT: 5 vulnerabilities (highest severity is: 7.5)

Vulnerable Library - temporal-spring-boot-autoconfigure-alpha-1.17.0-SNAPSHOT Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/org.yaml/snakeyaml/1.30/8fde7fe2586328ac3c68db92045e1c8759125000/snakeyaml-1.30.jar Found in HEAD commit: 2c29eda4558f4063804c816481a9f9acf132f65c ## Vulnerabilities | CVE | Severity | CVSS | Dependency | Type | Fixed in |...

security vulnerability

kotlin-stdlib-1.5.31.jar: 1 vulnerabilities (highest severity is: 5.3)

Vulnerable Library - kotlin-stdlib-1.5.31.jar Kotlin Standard Library for JVM Library home page: https://kotlinlang.org/ Path to dependency file: /temporal-kotlin/build.gradle Path to vulnerable library: /radle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib/1.5.31/6628d61d0f5603568e72d2d5915d2c034b4f1c55/kotlin-stdlib-1.5.31.jar,/home/wss-scanner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib/1.5.31/6628d61d0f5603568e72d2d5915d2c034b4f1c55/kotlin-stdlib-1.5.31.jar Found in HEAD commit: 489b9480700b742795e071c0526460c525dbf044 ## Vulnerabilities...

security vulnerability

chore(deps): update dependency d3 to v7

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [d3](https://d3js.org) ([source](https://togithub.com/d3/d3)) | dependencies | major | [`^5.16.0` -> `^7.0.0`](https://renovatebot.com/diffs/npm/d3/5.16.0/7.0.0) | By merging...

security fix

WS-2022-0322 (Medium) detected in d3-color-1.4.1.tgz

## WS-2022-0322 - Medium Severity Vulnerability Vulnerable Library - d3-color-1.4.1.tgz Color spaces! RGB, HSL, Cubehelix, Lab and HCL (Lch). Library home page: https://registry.npmjs.org/d3-color/-/d3-color-1.4.1.tgz Dependency Hierarchy: - charts-31.1.0.tgz (Root Library) -...

security vulnerability

WS-2021-0638 (High) detected in mocha-7.2.0.tgz

## WS-2021-0638 - High Severity Vulnerability Vulnerable Library - mocha-7.2.0.tgz simple, flexible, fun test framework Library home page: https://registry.npmjs.org/mocha/-/mocha-7.2.0.tgz Dependency Hierarchy: - :x: **mocha-7.2.0.tgz** (Vulnerable Library) Found in base branch:...

security vulnerability

Configure Mend for GitHub.com

Welcome to [Mend for GitHub.com](https://github.com/apps/mend-for-github-com) (formerly WhiteSource). This is an onboarding PR to help you understand and configure settings before Mend starts scanning your repository for security vulnerabilities. :vertical_traffic_light: Mend...