Update dependency postcss to v8 - #14
Security Report
You have successfully remediated 3 vulnerabilities, but introduced 5 new vulnerabilities in this branch.
❌ New vulnerabilities:
| Vulnerability | Severity | Vulnerable Library | Direct Library | Suggested Fix | Issue | |
|---|---|---|---|---|---|---|
CVE-941441-362681Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json,/package.json Dependency Hierarchy: -> core-2.0.0-alpha.64.tgz (Root Library) -> webpack-4.44.2.tgz -> terser-webpack-plugin-1.4.5.tgz -> cacache-12.0.4.tgz -> mississippi-3.0.0.tgz -> end-of-stream-1.4.4.tgz -> ❌ once-1.4.0.tgz (Vulnerable Library) |
9.8 | Transitive once-1.4.0.tgz |
core-2.0.0-alpha.64.tgz | None | ||
CVE-941441-362681Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json,/package.json Dependency Hierarchy: -> cmake-js-6.2.1.tgz (Root Library) -> unzipper-0.8.14.tgz -> fstream-1.0.12.tgz -> rimraf-2.7.1.tgz -> glob-7.1.7.tgz -> ❌ once-1.4.0.tgz (Vulnerable Library) |
9.8 | Transitive once-1.4.0.tgz |
cmake-js-6.2.1.tgz | None | ||
CVE-941441-362681Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json,/package.json Dependency Hierarchy: -> preset-classic-2.0.0-alpha.64.tgz (Root Library) -> plugin-content-docs-2.0.0-alpha.64.tgz -> execa-3.4.0.tgz -> get-stream-5.2.0.tgz -> pump-3.0.0.tgz -> ❌ once-1.4.0.tgz (Vulnerable Library) |
9.8 | Transitive once-1.4.0.tgz |
preset-classic-2.0.0-alpha.64.tgz | None | ||
CVE-2026-41305Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> postcss-nodegui-autoprefixer-0.0.7.tgz (Root Library) -> ❌ postcss-7.0.39.tgz (Vulnerable Library) |
6.1 | Transitive postcss-7.0.39.tgz |
postcss-nodegui-autoprefixer-0.0.7.tgz | Transitive 8.5.10 |
None | |
CVE-2026-69153Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> postcss-nodegui-autoprefixer-0.0.7.tgz (Root Library) -> ❌ postcss-7.0.39.tgz (Vulnerable Library) |
5.3 | Transitive postcss-7.0.39.tgz |
postcss-nodegui-autoprefixer-0.0.7.tgz | Transitive postcss - 8.5.23 |
None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2026-41305 | postcss-7.0.36.tgz |
| CVE-2022-25881 | http-cache-semantics-4.1.0.tgz |
| CVE-2026-69153 | postcss-7.0.36.tgz |
Base branch total remaining vulnerabilities: 244
Base branch commit: null
Total libraries scanned: 1460
Scan token: 0ac91f204efc4cbf957ed1f7f9c9e959