Update dependency immutable to v4 - #34
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-666308-417910Path to dependency file: /package.json Path to vulnerable library: /node_modules/has-symbols/package.json Dependency Hierarchy: -> node-libs-browser-0.5.3.tgz (Root Library) -> assert-1.5.1.tgz -> object.assign-4.1.7.tgz -> ❌ has-symbols-1.1.0.tgz (Vulnerable Library) |
 Critical |
9.8 | Transitive has-symbols-1.1.0.tgz |
node-libs-browser-0.5.3.tgz | #22 | |
CVE-2026-26996Path to dependency file: /package.json Path to vulnerable library: /node_modules/commoner/node_modules/minimatch/package.json Dependency Hierarchy: -> react-0.13.3.tgz (Root Library) -> envify-3.4.1.tgz -> jstransform-11.0.3.tgz -> commoner-0.10.8.tgz -> glob-5.0.15.tgz -> ❌ minimatch-3.1.5.tgz (Vulnerable Library) |
 High |
7.5 | Transitive minimatch-3.1.5.tgz |
react-0.13.3.tgz | Transitive 10.2.1 |
#11 |
CVE-2026-14257Path to dependency file: /package.json Path to vulnerable library: /node_modules/brace-expansion/package.json Dependency Hierarchy: -> react-0.13.3.tgz (Root Library) -> envify-3.4.1.tgz -> jstransform-11.0.3.tgz -> commoner-0.10.8.tgz -> glob-5.0.15.tgz -> minimatch-3.1.5.tgz -> ❌ brace-expansion-1.1.16.tgz (Vulnerable Library) |
High |
7.5 | Transitive brace-expansion-1.1.16.tgz |
react-0.13.3.tgz | Transitive brace-expansion - 5.0.8 |
#11 |
CVE-2026-13149Path to dependency file: /package.json Path to vulnerable library: /node_modules/brace-expansion/package.json Dependency Hierarchy: -> react-0.13.3.tgz (Root Library) -> envify-3.4.1.tgz -> jstransform-11.0.3.tgz -> commoner-0.10.8.tgz -> glob-5.0.15.tgz -> minimatch-3.1.5.tgz -> ❌ brace-expansion-1.1.16.tgz (Vulnerable Library) |
High |
7.5 | Transitive brace-expansion-1.1.16.tgz |
react-0.13.3.tgz | Transitive 5.0.7 |
#11 |
CVE-2020-11023Path to dependency file: /test/index.html Path to vulnerable library: /test/index.html Dependency Hierarchy: -> ❌ jquery-11.0-1.7.22-1.min.js (Vulnerable Library) |
 Medium |
6.9 | Direct jquery-11.0-1.7.22-1.min.js |
jquery-11.0-1.7.22-1.min.js | org.webjars.npm:jquery:3.5.0,jquery - 3.5.0,jquery-rails - 4.4.0,jQuery - 3.5.0 | None |
CVE-2020-11022Path to dependency file: /test/index.html Path to vulnerable library: /test/index.html Dependency Hierarchy: -> ❌ jquery-11.0-1.7.22-1.min.js (Vulnerable Library) |
Medium |
6.9 | Direct jquery-11.0-1.7.22-1.min.js |
jquery-11.0-1.7.22-1.min.js | org.webjars.npm:jquery:3.5.0,jquery - 3.5.0,jquery - 3.5.0,jquery-rails - 4.4.0 | None |
CVE-2019-11358Path to dependency file: /test/index.html Path to vulnerable library: /test/index.html Dependency Hierarchy: -> ❌ jquery-11.0-1.7.22-1.min.js (Vulnerable Library) |
Medium |
6.1 | Direct jquery-11.0-1.7.22-1.min.js |
jquery-11.0-1.7.22-1.min.js | org.webjars.npm:jquery:3.4.0,django - 2.2.2,jquery - 3.4.0,jquery-rails - 4.3.4,django - 2.1.9,jQuery - 3.4.0,jQuery - 3.4.0 | None |
CVE-2015-9251Path to dependency file: /test/index.html Path to vulnerable library: /test/index.html Dependency Hierarchy: -> ❌ jquery-11.0-1.7.22-1.min.js (Vulnerable Library) |
Medium |
6.1 | Direct jquery-11.0-1.7.22-1.min.js |
jquery-11.0-1.7.22-1.min.js | jquery - 3.0.0,org.webjars.npm:jquery:1.12.2,jQuery - 3.0.0,jquery-rails - 4.2.0,jquery - 1.12.2,org.webjars.npm:jquery:3.0.0,jQuery - 1.12.2,jQuery - 3.0.0,org.webjars.npm:jquery:1.12.2,org.webjars.npm:jquery:3.0.0,jquery - 3.0.0,jquery - 1.12.2,jQuery - 1.12.2,jquery-rails - 4.2.0 | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2015-9251 | jquery-1.9.1.js |
| CVE-2020-11022 | jquery-1.9.1.js |
| CVE-2026-14257 | brace-expansion-1.1.11.tgz |
| CVE-2019-11358 | jquery-1.9.1.js |
| CVE-2026-59880 | immutable-3.7.6.tgz |
| CVE-2026-29063 | immutable-3.7.6.tgz |
| CVE-2025-5889 | brace-expansion-1.1.11.tgz |
| CVE-2026-26996 | minimatch-3.1.2.tgz |
| CVE-2026-27904 | minimatch-3.1.2.tgz |
| CVE-2017-16129 | superagent-1.2.0.tgz |
| CVE-2020-11023 | jquery-1.9.1.js |
| CVE-2026-33750 | brace-expansion-1.1.11.tgz |
| CVE-2026-59879 | immutable-3.7.6.tgz |
| CVE-2026-13149 | brace-expansion-1.1.11.tgz |
Base branch total remaining vulnerabilities: 49
Base branch commit: null
Total libraries scanned: 282
Scan token: a3ba6cbe8eeb415f9c564975977e9910