chore(deps): update dependency body-parser to ^1.20.3 (main) - autoclosed #340
Security Report
❗️Scan Warnings: The scan completed with warnings. The integration encountered issues with one or more projects in this repository. Consequently, there may be gaps in the coverage of open-source dependencies used in the repository.
Scan Details Report
general
https://vonagecc.jfrog.io/artifactory
| Step | Level | Description | Details |
|---|---|---|---|
| Checking registry connectivity | ⚠Warn | Unsupported configuration was provided | unsupported host type gradle, skipped |
3 new vulnerabilities were introduced in this branch.❌ New vulnerabilities:
| CVE | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Suggested Fix | Issue | Reachability |
|---|---|---|---|---|---|---|---|---|
CVE-2024-43800Path to dependency file: /sample/SipInterconnect/package.json Path to vulnerable library: /sample/SipInterconnect/node_modules/serve-static/package.json Dependency Hierarchy: -> express-4.19.2.tgz (Root Library) -> ❌ serve-static-1.15.0.tgz (Vulnerable Library) |
 Medium |
5.0 | Not Defined | 0.0% | serve-static-1.15.0.tgz | Upgrade to version: serve-static - 1.16.0,2.1.0 | #337 |
|
CVE-2024-43799Path to dependency file: /sample/SipInterconnect/package.json Path to vulnerable library: /sample/SipInterconnect/node_modules/send/package.json Dependency Hierarchy: -> express-4.19.2.tgz (Root Library) -> ❌ send-0.18.0.tgz (Vulnerable Library) |
Medium |
5.0 | Not Defined | 0.0% | send-0.18.0.tgz | Upgrade to version: send - 0.19.0 | #337 |
|
CVE-2024-43796Path to dependency file: /sample/SipInterconnect/package.json Path to vulnerable library: /sample/SipInterconnect/node_modules/express/package.json Dependency Hierarchy: -> ❌ express-4.19.2.tgz (Vulnerable Library) |
Medium |
5.0 | Not Defined | 0.0% | express-4.19.2.tgz | Upgrade to version: express - 4.20.0,5.0.0 | #337 |
|
Base branch total remaining vulnerabilities: 8
Base branch commit: d18c6420b83cd5d0096c8cbea8271e1bc8cfff31
Total libraries scanned: 150
Scan token: 2f3d9c314dfe45b485f8d859bc10390f