Skip to content

Update dependency underscore to v1.12.1 #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
staging-whitesource-for-github-com wants to merge 1 commit into
base: master
Choose a base branch
from

Update dependency underscore to v1.12.1

1f7ee1a
Select commit
Loading
Failed to load commit list.
Open

Update dependency underscore to v1.12.1 #9

Update dependency underscore to v1.12.1
1f7ee1a
Select commit
Loading
Failed to load commit list.
Staging - WhiteSource for GitHub.com / Mend Security Check failed Mar 5, 2026 in 4m 18s

Security Report

You have successfully remediated 2 vulnerabilities, but introduced 1 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue Reachability
CVE-2026-27601

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ underscore-1.12.1.tgz (Vulnerable Library)

High 7.5 Direct underscore-1.12.1.tgz underscore-1.12.1.tgz None

Reachable

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
CVE-2021-23358 underscore-1.9.1.tgz
CVE-2026-27601 underscore-1.9.1.tgz

Base branch total remaining vulnerabilities: 62
Base branch commit: 87cb511a22269d0fea8ca4c1fcebbf6720e00921


Total libraries scanned: 380

Scan token: 9583e3e6d7f0472e833d7fd5fa6b89eb

View more details on Staging - WhiteSource for GitHub.com