Skip to content

Update dependency node-fetch to v2.6.7 #14

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dev-mend-for-github-com wants to merge 1 commit into
base: main
Choose a base branch
from

Update dependency node-fetch to v2.6.7

6865f30
Select commit
Loading
Failed to load commit list.
Open

Update dependency node-fetch to v2.6.7 #14

Update dependency node-fetch to v2.6.7
6865f30
Select commit
Loading
Failed to load commit list.
Dev - Mend for GitHub.com / Mend Security Check failed Nov 24, 2025 in 2m 40s

Security Report

You have successfully remediated 13 vulnerabilities, but introduced 1 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue Reachability
CVE-952079-685214

Path to dependency file: /nexmo-changelog/package.json

Path to vulnerable library: /nexmo-changelog/package.json

Dependency Hierarchy:

-> ❌ node-fetch-2.6.7.tgz (Vulnerable Library)

Critical 9.8 Direct node-fetch-2.6.7.tgz node-fetch-2.6.7.tgz None

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
GHSA-7fhm-mqm4-2wp7 acorn-5.7.3.tgz
GHSA-7fhm-mqm4-2wp7 minimist-1.2.0.tgz
GHSA-6chw-6frg-f759 acorn-6.4.0.tgz
GHSA-7fhm-mqm4-2wp7 minimist-0.0.10.tgz
CVE-2022-37598 uglify-js-3.7.1.tgz
CVE-2020-15366 ajv-6.10.0.tgz
CVE-2021-23337 lodash-4.17.19.tgz
GHSA-35jh-r3h4-6jhm lodash-4.17.19.tgz
CVE-2020-28500 lodash-4.17.19.tgz
GHSA-7fhm-mqm4-2wp7 acorn-6.4.0.tgz
CVE-2025-54798 tmp-0.0.33.tgz
GHSA-6chw-6frg-f759 acorn-5.7.3.tgz
GHSA-7fhm-mqm4-2wp7 minimist-0.0.8.tgz

Base branch total remaining vulnerabilities: 72
Base branch commit: 1fa94290fb5d5a75015c22faad5467200e4eff4a


Total libraries scanned: 609

Scan token: 7c4bba73ffe34d958189e7355a9b19bf

View more details on Dev - Mend for GitHub.com