Skip to content

Update dependency postcss to v8 - #14

Open
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/postcss-8.x
Open

Update dependency postcss to v8#14
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/postcss-8.x

Update dependency postcss to v8

bcf06e5
Select commit
Loading
Failed to load commit list.
Dev - Mend for GitHub.com / Mend Security Check failed Sep 9, 2026 in 6m 28s

Security Report

You have successfully remediated 3 vulnerabilities, but introduced 5 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue
CVE-941441-362681

Path to dependency file: /website/package.json

Path to vulnerable library: /website/package.json,/package.json

Dependency Hierarchy:

-> core-2.0.0-alpha.64.tgz (Root Library)

   -> webpack-4.44.2.tgz

     -> terser-webpack-plugin-1.4.5.tgz

       -> cacache-12.0.4.tgz

         -> mississippi-3.0.0.tgz

           -> end-of-stream-1.4.4.tgz

             -> ❌ once-1.4.0.tgz (Vulnerable Library)

Critical 9.8 Transitive once-1.4.0.tgz core-2.0.0-alpha.64.tgz None
CVE-941441-362681

Path to dependency file: /website/package.json

Path to vulnerable library: /website/package.json,/package.json

Dependency Hierarchy:

-> cmake-js-6.2.1.tgz (Root Library)

   -> unzipper-0.8.14.tgz

     -> fstream-1.0.12.tgz

       -> rimraf-2.7.1.tgz

         -> glob-7.1.7.tgz

           -> ❌ once-1.4.0.tgz (Vulnerable Library)

Critical 9.8 Transitive once-1.4.0.tgz cmake-js-6.2.1.tgz None
CVE-941441-362681

Path to dependency file: /website/package.json

Path to vulnerable library: /website/package.json,/package.json

Dependency Hierarchy:

-> preset-classic-2.0.0-alpha.64.tgz (Root Library)

   -> plugin-content-docs-2.0.0-alpha.64.tgz

     -> execa-3.4.0.tgz

       -> get-stream-5.2.0.tgz

         -> pump-3.0.0.tgz

           -> ❌ once-1.4.0.tgz (Vulnerable Library)

Critical 9.8 Transitive once-1.4.0.tgz preset-classic-2.0.0-alpha.64.tgz None
CVE-2026-41305

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> postcss-nodegui-autoprefixer-0.0.7.tgz (Root Library)

   -> ❌ postcss-7.0.39.tgz (Vulnerable Library)

Medium 6.1 Transitive postcss-7.0.39.tgz postcss-nodegui-autoprefixer-0.0.7.tgz Transitive 8.5.10 None
CVE-2026-69153

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> postcss-nodegui-autoprefixer-0.0.7.tgz (Root Library)

   -> ❌ postcss-7.0.39.tgz (Vulnerable Library)

Medium 5.3 Transitive postcss-7.0.39.tgz postcss-nodegui-autoprefixer-0.0.7.tgz Transitive postcss - 8.5.23 None

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
CVE-2026-41305 postcss-7.0.36.tgz
CVE-2022-25881 http-cache-semantics-4.1.0.tgz
CVE-2026-69153 postcss-7.0.36.tgz

Base branch total remaining vulnerabilities: 244
Base branch commit: null


Total libraries scanned: 1460

Scan token: 0ac91f204efc4cbf957ed1f7f9c9e959