Skip to content

Conversation

@dev-mend-for-github.zerozr99.workers.dev
Copy link

@dev-mend-for-github.zerozr99.workers.dev dev-mend-for-github.zerozr99.workers.dev bot commented Jan 20, 2025

This PR contains the following updates:

Package Type Update Change
node-sass dependencies patch 4.9.3 -> 4.9.4

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability Reachability
Critical Critical 9.8 CVE-2021-3918
High High 8.2 CVE-2021-32804
High High 8.2 CVE-2021-37713
High High 8.1 CVE-2018-11693
High High 7.5 CVE-2018-20834
High High 7.5 CVE-2019-13173
High High 7.5 CVE-2021-33623
High High 7.5 CVE-2022-3517
High High 7.3 CVE-2018-11499
High High 7.3 CVE-2020-7774
Medium Medium 6.5 CVE-2018-19837
Medium Medium 6.5 CVE-2018-19838
Medium Medium 6.5 CVE-2018-20190
Medium Medium 6.5 CVE-2018-20821
Medium Medium 6.5 CVE-2018-20822
Medium Medium 6.5 CVE-2019-18797
Medium Medium 6.5 CVE-2019-6283
Medium Medium 6.5 CVE-2019-6284
Medium Medium 5.9 GHSA-9v62-24cr-58cx
Medium Medium 5.6 CVE-2018-11694
Medium Medium 5.6 CVE-2018-11696
Medium Medium 5.6 CVE-2018-19827
Medium Medium 5.6 CVE-2020-15366
Medium Medium 5.5 GHSA-779f-wgxg-qr8f
Medium Medium 5.3 CVE-2020-24025
Medium Medium 5.3 CVE-2020-7608
Medium Medium 5.3 CVE-2022-25758
Medium Medium 4.8 CVE-2018-11697
Medium Medium 4.8 CVE-2018-11698
Low Low 3.7 CVE-2018-19797
Low Low 3.7 CVE-2018-19839

By merging this PR, the issue #2 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
Critical Critical 9.8 CVE-2021-44906
Medium Medium 5.6 CVE-2020-7598

Release Notes

sass/node-sass (node-sass)

v4.9.4

Compare Source

https://github.com/sass/node-sass/releases/tag/v4.9.4


  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github.zerozr99.workers.dev dev-mend-for-github.zerozr99.workers.dev bot added the security fix Security fix generated by Mend label Jan 20, 2025
@dev-mend-for-github.zerozr99.workers.dev dev-mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/node-sass-4.x-lockfile branch from 16cf1b6 to 77c5284 Compare January 23, 2025 20:42
@dev-mend-for-github.zerozr99.workers.dev dev-mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/node-sass-4.x-lockfile branch from 77c5284 to 3462dbc Compare March 3, 2025 14:55
@dev-mend-for-github.zerozr99.workers.dev dev-mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/node-sass-4.x-lockfile branch 3 times, most recently from e6500d7 to ac93f81 Compare September 27, 2025 20:04
@dev-mend-for-github.zerozr99.workers.dev dev-mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/node-sass-4.x-lockfile branch from ac93f81 to 4af41f6 Compare September 28, 2025 05:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant