Skip to content

Update dependency body-parser to v1.20.4 #38

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dev-mend-for-github-com wants to merge 1 commit into
base: main
Choose a base branch
from

Update dependency body-parser to v1.20.4

e29b94b
Select commit
Loading
Failed to load commit list.
Open

Update dependency body-parser to v1.20.4 #38

Update dependency body-parser to v1.20.4
e29b94b
Select commit
Loading
Failed to load commit list.
Dev - Mend for GitHub.com / Mend Security Check failed May 19, 2026 in 5m 17s

Security Report

You have successfully remediated 1 vulnerabilities, but introduced 5 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue
CVE-398484-724968

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> core-7.23.2.tgz (Root Library)

   -> traverse-7.29.0.tgz

     -> debug-4.4.3.tgz

       -> ❌ ms-2.1.3.tgz (Vulnerable Library)

Critical 9.8 Transitive ms-2.1.3.tgz core-7.23.2.tgz None
CVE-289561-266276

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> body-parser-1.20.4.tgz (Root Library)

   -> raw-body-2.5.3.tgz

     -> http-errors-2.0.1.tgz

       -> ❌ inherits-2.0.4.tgz (Vulnerable Library)

Critical 9.8 Transitive inherits-2.0.4.tgz body-parser-1.20.4.tgz None
CVE-2026-41239

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ dompurify-2.5.9.tgz (Vulnerable Library)

Medium 6.8 Direct dompurify-2.5.9.tgz dompurify-2.5.9.tgz 3.4.0 None
CVE-2026-41240

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ dompurify-2.5.9.tgz (Vulnerable Library)

Medium 6.5 Direct dompurify-2.5.9.tgz dompurify-2.5.9.tgz 3.4.0 None
CVE-2025-27789

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> core-7.23.2.tgz (Root Library)

   -> ❌ helpers-7.29.2.tgz (Vulnerable Library)

Medium 6.2 Transitive helpers-7.29.2.tgz core-7.23.2.tgz Transitive @⁠babel/runtime - 8.0.0-alpha.17,@⁠babel/helpers - 8.0.0-alpha.17,@⁠babel/runtime-corejs2 - 8.0.0-alpha.17,@⁠babel/runtime - 7.26.10,@⁠babel/helpers - 7.26.10,@⁠babel/runtime-corejs2 - 7.26.10,@⁠babel/runtime-corejs3 - 8.0.0-alpha.17,https://github.com/babel/babel.git - v7.26.10,@⁠babel/runtime-corejs3 - 7.26.10 None

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
CVE-506311-612488 content-type-1.0.4.tgz

Base branch total remaining vulnerabilities: 80
Base branch commit: 716fe17b8d26ad794de274101da05107a712797c


Total libraries scanned: 446

Scan token: ae887737a13641029794cfd06fb0a5f7

View more details on Dev - Mend for GitHub.com