database-lab-engine

database-lab-engine copied to clipboard

## CVE-2023-28155 - Medium Severity Vulnerability Vulnerable Library - request-2.88.12.tgz Library home page: https://registry.npmjs.org/@cypress/request/-/request-2.88.12.tgz Path to dependency file: /ui/package.json Path to vulnerable library: /ui/package.json Dependency Hierarchy: - @postgres.ai/ce-1.0.0.tgz (Root Library)...

mend-bolt-for-github[bot]

## CVE-2023-45133 - High Severity Vulnerability Vulnerable Library - traverse-7.19.0.tgz The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes Library home...

mend-bolt-for-github[bot]

## CVE-2023-42282 - Critical Severity Vulnerability Vulnerable Library - ip-1.1.8.tgz [](https://www.npmjs.com/package/ip) Library home page: https://registry.npmjs.org/ip/-/ip-1.1.8.tgz Path to dependency file: /ui/package.json Path to vulnerable library: /ui/package.json Dependency Hierarchy: - @postgres.ai/platform-1.0.0.tgz (Root...

mend-bolt-for-github[bot]

## CVE-2023-26159 - Medium Severity Vulnerability Vulnerable Library - follow-redirects-1.15.1.tgz HTTP and HTTPS modules that follow redirects. Library home page: https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.1.tgz Path to dependency file: /ui/package.json Path to vulnerable library:...

mend-bolt-for-github[bot]

CVE-2023-26115 (High) detected in word-wrap-1.2.3.tgz

2

## CVE-2023-26115 - High Severity Vulnerability Vulnerable Library - word-wrap-1.2.3.tgz Wrap words to a specified length. Library home page: https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.3.tgz Path to dependency file: /ui/package.json Path to vulnerable library: /ui/package.json...

mend-bolt-for-github[bot]

CVE-2022-25883 (High) detected in multiple libraries

2

## CVE-2022-25883 - High Severity Vulnerability Vulnerable Libraries - semver-7.3.5.tgz, semver-7.3.7.tgz, semver-6.3.0.tgz semver-7.3.5.tgz The semantic version parser used by npm. Library home page: https://registry.npmjs.org/semver/-/semver-7.3.5.tgz Path to dependency file: /ui/package.json Path...

mend-bolt-for-github[bot]

## CVE-2023-46234 - High Severity Vulnerability Vulnerable Library - browserify-sign-4.2.1.tgz adds node crypto signing for browsers Library home page: https://registry.npmjs.org/browserify-sign/-/browserify-sign-4.2.1.tgz Path to dependency file: /ui/package.json Path to vulnerable library: /ui/package.json...

mend-bolt-for-github[bot]

## CVE-2023-44270 - Medium Severity Vulnerability Vulnerable Library - postcss-8.4.18.tgz Tool for transforming styles with JS plugins Library home page: https://registry.npmjs.org/postcss/-/postcss-8.4.18.tgz Path to dependency file: /ui/package.json Path to vulnerable library:...

mend-bolt-for-github[bot]

## CVE-2024-28849 - Medium Severity Vulnerability Vulnerable Library - follow-redirects-1.15.1.tgz HTTP and HTTPS modules that follow redirects. Library home page: https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.1.tgz Path to dependency file: /ui/package.json Path to vulnerable library:...

mend-bolt-for-github[bot]

## CVE-2023-48795 - Medium Severity Vulnerability Vulnerable Library - golang.org/x/crypto-v0.14.0 Library home page: https://proxy.golang.org/golang.org/x/crypto/@v/v0.14.0.zip Path to dependency file: /engine/go.mod Path to vulnerable library: /go/pkg/mod/cache/download/golang.org/x/crypto/@v/v0.14.0.mod Dependency Hierarchy: - :x: **golang.org/x/crypto-v0.14.0** (Vulnerable...

mend-bolt-for-github[bot]