Skip to content

Update dependency body-parser to v1.20.4

1ff6812
Select commit
Loading
Failed to load commit list.
Open

Update dependency body-parser to v1.20.4 #38

Update dependency body-parser to v1.20.4
1ff6812
Select commit
Loading
Failed to load commit list.
Dev - Mend for GitHub.com / Mend Security Check failed May 30, 2026 in 1m 47s

Security Report

You have successfully remediated 1 vulnerabilities, but introduced 4 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue
CVE-398484-724968

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> core-7.23.2.tgz (Root Library)

   -> debug-4.4.3.tgz

     -> ❌ ms-2.1.3.tgz (Vulnerable Library)

Critical 9.8 Transitive ms-2.1.3.tgz core-7.23.2.tgz None
CVE-289561-266276

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> body-parser-1.20.4.tgz (Root Library)

   -> http-errors-2.0.1.tgz

     -> ❌ inherits-2.0.4.tgz (Vulnerable Library)

Critical 9.8 Transitive inherits-2.0.4.tgz body-parser-1.20.4.tgz None
CVE-2026-41239

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ dompurify-2.5.9.tgz (Vulnerable Library)

Medium 6.8 Direct dompurify-2.5.9.tgz dompurify-2.5.9.tgz 3.4.0 None
CVE-2026-41240

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ dompurify-2.5.9.tgz (Vulnerable Library)

Medium 6.5 Direct dompurify-2.5.9.tgz dompurify-2.5.9.tgz 3.4.0 None

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
CVE-506311-612488 content-type-1.0.4.tgz

Base branch total remaining vulnerabilities: 80
Base branch commit: 716fe17b8d26ad794de274101da05107a712797c


Total libraries scanned: 446

Scan token: 1975ce8252a44bd78693b348616f21f3