Update dependency body-parser to v1.20.4 (main) #14
Mend for GitHub.com / WhiteSource Security Check
failed
Dec 30, 2025 in 2m 3s
Security Report
You have successfully remediated 13 vulnerabilities, but introduced 1 new vulnerabilities in this branch.
❌ New vulnerabilities:
| Vulnerability | Severity | Exploit Maturity | EPSS | Vulnerable Library | Direct Library | Suggested Fix | Issue | Reachability | |
|---|---|---|---|---|---|---|---|---|---|
CVE-2024-43800Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.16.3.tgz (Root Library) -> ❌ serve-static-1.13.2.tgz (Vulnerable Library) |
5.0 | Not Defined | 0.5% | Transitive serve-static-1.13.2.tgz |
express-4.16.3.tgz | Transitive 1.16.0 |
#4 |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2025-7783 | form-data-2.3.3.tgz |
| CVE-2024-45590 | body-parser-1.18.3.tgz |
| CVE-2025-15284 | qs-6.5.2.tgz |
| CVE-2021-3918 | json-schema-0.2.3.tgz |
| CVE-2020-15366 | ajv-6.12.2.tgz |
| CVE-2022-24999 | qs-6.5.2.tgz |
| CVE-2022-23541 | jsonwebtoken-8.5.1.tgz |
| CVE-2022-25883 | semver-5.7.1.tgz |
| CVE-2022-23540 | jsonwebtoken-8.5.1.tgz |
| CVE-2025-65945 | jws-3.2.2.tgz |
| CVE-2022-23539 | jsonwebtoken-8.5.1.tgz |
| CVE-2023-26136 | tough-cookie-2.5.0.tgz |
| CVE-2023-28155 | request-2.88.2.tgz |
Base branch total remaining vulnerabilities: 25
Base branch commit: null
Total libraries scanned: 88
Scan token: 12fa57bd26f947a2858d251340b77dca
Loading