Update dependency underscore to v1.12.1 #19
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-398484-724968Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> core-7.23.2.tgz (Root Library) -> debug-4.4.3.tgz -> ❌ ms-2.1.3.tgz (Vulnerable Library) |
 Critical |
9.8 | Transitive ms-2.1.3.tgz |
core-7.23.2.tgz | None | |
CVE-2026-41239Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> ❌ dompurify-2.5.9.tgz (Vulnerable Library) |
 Medium |
6.8 | Direct dompurify-2.5.9.tgz |
dompurify-2.5.9.tgz | Upgrade to version dompurify - 3.4.0 or greater | None |
CVE-2026-41240Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> ❌ dompurify-2.5.9.tgz (Vulnerable Library) |
Medium |
6.5 | Direct dompurify-2.5.9.tgz |
dompurify-2.5.9.tgz | Upgrade to version dompurify - 3.4.0 or greater | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2021-23358 | underscore-1.9.1.tgz |
Base branch total remaining vulnerabilities: 78
Base branch commit: 716fe17b8d26ad794de274101da05107a712797c
Total libraries scanned: 420
Scan token: 1b011747c58843d1a4c2160932363724