Update dependency grunt-contrib-compress to v2 #11
Dev - Mend for GitHub.com / Mend Security Check
failed
Nov 27, 2025 in 3m 10s
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-2025-7338Path to dependency file: /package.json Path to vulnerable library: /node_modules/multer/package.json Dependency Hierarchy: -> ❌ multer-1.4.5-lts.2.tgz (Vulnerable Library) |
 High |
7.5 | Direct multer-1.4.5-lts.2.tgz |
multer-1.4.5-lts.2.tgz | None | |
CVE-2025-13466Path to dependency file: /package.json Path to vulnerable library: /node_modules/body-parser/package.json Dependency Hierarchy: -> ❌ body-parser-1.20.3.tgz (Vulnerable Library) |
 Medium |
5.3 | Direct body-parser-1.20.3.tgz |
body-parser-1.20.3.tgz | body-parser - 2.2.1 | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-636288-474053 | on-headers-1.0.2.tgz |
| CVE-2025-59343 | tar-fs-2.1.1.tgz |
| CVE-2017-18214 | moment-2.0.0.tgz |
| CVE-2025-64756 | glob-10.4.5.tgz |
| CVE-2025-5889 | brace-expansion-2.0.1.tgz |
| CVE-2025-7338 | multer-1.4.5-lts.1.tgz |
| CVE-2025-5889 | brace-expansion-1.1.11.tgz |
| CVE-2025-13466 | body-parser-1.20.2.tgz |
| CVE-2025-7339 | on-headers-1.0.2.tgz |
Base branch total remaining vulnerabilities: 62
Base branch commit: null
Total libraries scanned: 972
Scan token: 9cca9a2ef610476a85ab572aeebd40b1
Loading