Update dependency vue to ^3.4.30 - #5
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-941441-362681Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json Dependency Hierarchy: -> core-2.4.0.tgz (Root Library) -> shelljs-0.8.5.tgz -> glob-7.2.3.tgz -> ❌ once-1.4.0.tgz (Vulnerable Library) |
 Critical |
9.8 | Transitive once-1.4.0.tgz |
core-2.4.0.tgz | None | |
CVE-2026-39834Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/golang.org/x/crypto/@v/v0.23.0.mod Dependency Hierarchy: -> github.com/Go-git/go-git/v5-v5.11.0 (Root Library) -> ❌ golang.org/x/crypto-v0.23.0 (Vulnerable Library) |
Critical |
9.1 | Transitive golang.org/x/crypto-v0.23.0 |
github.com/Go-git/go-git/v5-v5.11.0 | Transitive v0.52.0 |
None |
CVE-2026-39831Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/golang.org/x/crypto/@v/v0.23.0.mod Dependency Hierarchy: -> github.com/Go-git/go-git/v5-v5.11.0 (Root Library) -> ❌ golang.org/x/crypto-v0.23.0 (Vulnerable Library) |
Critical |
9.1 | Transitive golang.org/x/crypto-v0.23.0 |
github.com/Go-git/go-git/v5-v5.11.0 | Transitive v0.52.0 |
None |
CVE-2026-44728Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json Dependency Hierarchy: -> core-2.4.0.tgz (Root Library) -> preset-env-7.24.7.tgz -> ❌ plugin-transform-modules-systemjs-7.24.7.tgz (Vulnerable Library) |
 High |
8.2 | Transitive plugin-transform-modules-systemjs-7.24.7.tgz |
core-2.4.0.tgz | Transitive 7.29.4 |
None |
CVE-2026-44973Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/github.com/go-git/go-billy/v5/@v/v5.5.0.mod Dependency Hierarchy: -> github.com/Go-git/go-git/v5-v5.11.0 (Root Library) -> ❌ github.com/go-git/go-Billy/v5-v5.5.0 (Vulnerable Library) |
High |
8.1 | Transitive github.com/go-git/go-Billy/v5-v5.5.0 |
github.com/Go-git/go-git/v5-v5.11.0 | None | |
CVE-2026-46599Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/golang.org/x/image/@v/v0.12.0.mod Dependency Hierarchy: -> github.com/leaanthony/winicon-v1.0.0 (Root Library) -> ❌ golang.org/x/image-v0.12.0 (Vulnerable Library) |
High |
7.5 | Transitive golang.org/x/image-v0.12.0 |
github.com/leaanthony/winicon-v1.0.0 | Transitive golang.org/x/image - v0.41.0 |
None |
CVE-2026-46599Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/golang.org/x/image/@v/v0.12.0.mod Dependency Hierarchy: -> github.com/tc-hib/winres-v0.2.1 (Root Library) -> ❌ golang.org/x/image-v0.12.0 (Vulnerable Library) |
High |
7.5 | Transitive golang.org/x/image-v0.12.0 |
github.com/tc-hib/winres-v0.2.1 | Transitive golang.org/x/image - v0.41.0 |
None |
CVE-2026-46597Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/golang.org/x/crypto/@v/v0.23.0.mod Dependency Hierarchy: -> github.com/Go-git/go-git/v5-v5.11.0 (Root Library) -> ❌ golang.org/x/crypto-v0.23.0 (Vulnerable Library) |
High |
7.5 | Transitive golang.org/x/crypto-v0.23.0 |
github.com/Go-git/go-git/v5-v5.11.0 | Transitive v0.52.0 |
None |
CVE-2026-44740Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/github.com/go-git/go-billy/v5/@v/v5.5.0.mod Dependency Hierarchy: -> github.com/Go-git/go-git/v5-v5.11.0 (Root Library) -> ❌ github.com/go-git/go-Billy/v5-v5.5.0 (Vulnerable Library) |
 Medium |
6.5 | Transitive github.com/go-git/go-Billy/v5-v5.5.0 |
github.com/Go-git/go-git/v5-v5.11.0 | None | |
CVE-2026-1229Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/github.com/cloudflare/circl/@v/v1.3.7.mod Dependency Hierarchy: -> github.com/Go-git/go-git/v5-v5.11.0 (Root Library) -> github.com/ProtonMail/go-crypto-v0.0.0-20230828082145-3c4c8a2d2371 -> ❌ github.com/Cloudflare/circl-v1.3.7 (Vulnerable Library) |
Medium |
6.5 | Transitive github.com/Cloudflare/circl-v1.3.7 |
github.com/Go-git/go-git/v5-v5.11.0 | None | |
CVE-2025-27789Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json Dependency Hierarchy: -> core-2.4.0.tgz (Root Library) -> core-7.24.7.tgz -> ❌ helpers-7.24.7.tgz (Vulnerable Library) |
Medium |
6.2 | Transitive helpers-7.24.7.tgz |
core-2.4.0.tgz | Transitive 7.26.10 |
None |
CVE-2025-27789Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json Dependency Hierarchy: -> core-2.4.0.tgz (Root Library) -> ❌ runtime-7.24.7.tgz (Vulnerable Library) |
Medium |
6.2 | Transitive runtime-7.24.7.tgz |
core-2.4.0.tgz | Transitive 7.26.10 |
None |
CVE-2025-27789Path to dependency file: /website/package.json Path to vulnerable library: /website/package.json Dependency Hierarchy: -> core-2.4.0.tgz (Root Library) -> ❌ runtime-corejs3-7.24.7.tgz (Vulnerable Library) |
Medium |
6.2 | Transitive runtime-corejs3-7.24.7.tgz |
core-2.4.0.tgz | Transitive 7.26.10 |
None |
CVE-2026-46598Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/golang.org/x/crypto/@v/v0.23.0.mod Dependency Hierarchy: -> github.com/Go-git/go-git/v5-v5.11.0 (Root Library) -> ❌ golang.org/x/crypto-v0.23.0 (Vulnerable Library) |
Medium |
5.3 | Transitive golang.org/x/crypto-v0.23.0 |
github.com/Go-git/go-git/v5-v5.11.0 | Transitive v0.52.0 |
None |
CVE-2026-33809Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/golang.org/x/image/@v/v0.12.0.mod Dependency Hierarchy: -> github.com/leaanthony/winicon-v1.0.0 (Root Library) -> ❌ golang.org/x/image-v0.12.0 (Vulnerable Library) |
Medium |
5.3 | Transitive golang.org/x/image-v0.12.0 |
github.com/leaanthony/winicon-v1.0.0 | Transitive v0.38.0 |
None |
CVE-2026-33809Path to dependency file: /v2/go.mod Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/golang.org/x/image/@v/v0.12.0.mod Dependency Hierarchy: -> github.com/tc-hib/winres-v0.2.1 (Root Library) -> ❌ golang.org/x/image-v0.12.0 (Vulnerable Library) |
Medium |
5.3 | Transitive golang.org/x/image-v0.12.0 |
github.com/tc-hib/winres-v0.2.1 | Transitive v0.38.0 |
None |
Base branch total remaining vulnerabilities: 132
Base branch commit: null
Total libraries scanned: 1223
Scan token: b1db2723c136496f9902e84af8b864ba