Skip to content

chore(devdeps): update dependency verdaccio to v6.10.2 - #829

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/verdaccio-6.x
Closed

chore(devdeps): update dependency verdaccio to v6.10.2#829
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/verdaccio-6.x

chore(devdeps): update dependency verdaccio to v6.10.2

81cede3
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / Mend Security Check failed Sep 10, 2026 in 2m 4s

Security Report

The Security Check found 12 vulnerabilities.

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue
CVE-2026-84394

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/api-report-0.0.0.tgz (Root Library)

   -> api-extractor-7.58.2.tgz

     -> tsdoc-config-0.18.1.tgz

       -> ajv-8.18.0.tgz

         -> ❌ fast-uri-3.1.6.tgz (Vulnerable Library)

High 7.5 Transitive fast-uri-3.1.6.tgz @⁠forgerock/api-report-0.0.0.tgz Transitive 3.1.7 #⁠732
CVE-2026-84292

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/api-report-0.0.0.tgz (Root Library)

   -> api-extractor-7.58.2.tgz

     -> tsdoc-config-0.18.1.tgz

       -> ajv-8.18.0.tgz

         -> ❌ fast-uri-3.1.6.tgz (Vulnerable Library)

High 7.5 Transitive fast-uri-3.1.6.tgz @⁠forgerock/api-report-0.0.0.tgz Transitive 3.1.7 #⁠732
CVE-2026-19534

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/local-release-tool-0.0.0.tgz (Root Library)

   -> platform-node-0.94.2.tgz

     -> ❌ undici-7.29.0.tgz (Vulnerable Library)

High 7.5 Transitive undici-7.29.0.tgz @⁠forgerock/local-release-tool-0.0.0.tgz Transitive 7.29.1 #⁠821
CVE-2026-84961

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/local-release-tool-0.0.0.tgz (Root Library)

   -> platform-node-0.94.2.tgz

     -> ❌ undici-7.29.0.tgz (Vulnerable Library)

High 7.4 Transitive undici-7.29.0.tgz @⁠forgerock/local-release-tool-0.0.0.tgz Transitive 7.29.1 #⁠821
CVE-2026-85024

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/local-release-tool-0.0.0.tgz (Root Library)

   -> platform-node-0.94.2.tgz

     -> ❌ undici-7.29.0.tgz (Vulnerable Library)

Medium 5.9 Transitive undici-7.29.0.tgz @⁠forgerock/local-release-tool-0.0.0.tgz Transitive 7.29.1 #⁠821
CVE-2026-85014

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/local-release-tool-0.0.0.tgz (Root Library)

   -> platform-node-0.94.2.tgz

     -> ❌ undici-7.29.0.tgz (Vulnerable Library)

Medium 5.9 Transitive undici-7.29.0.tgz @⁠forgerock/local-release-tool-0.0.0.tgz Transitive 7.29.1 #⁠821
CVE-2026-84890

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/local-release-tool-0.0.0.tgz (Root Library)

   -> platform-node-0.94.2.tgz

     -> ❌ undici-7.29.0.tgz (Vulnerable Library)

Medium 5.9 Transitive undici-7.29.0.tgz @⁠forgerock/local-release-tool-0.0.0.tgz Transitive 7.29.1 #⁠821
CVE-2026-84373

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/interface-mapping-validator-0.0.0.tgz (Root Library)

   -> vitest-3.2.6.tgz

     -> ❌ mocker-3.2.6.tgz (Vulnerable Library)

Medium 5.9 Transitive mocker-3.2.6.tgz @⁠forgerock/interface-mapping-validator-0.0.0.tgz Transitive 4.1.11 #⁠731
CVE-2026-84373

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/interface-mapping-validator-0.0.0.tgz (Root Library)

   -> ❌ vitest-3.2.6.tgz (Vulnerable Library)

Medium 5.9 Transitive vitest-3.2.6.tgz @⁠forgerock/interface-mapping-validator-0.0.0.tgz Transitive 4.1.11 #⁠731
CVE-2026-18149

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/local-release-tool-0.0.0.tgz (Root Library)

   -> platform-node-0.94.2.tgz

     -> ❌ undici-7.29.0.tgz (Vulnerable Library)

Medium 5.9 Transitive undici-7.29.0.tgz @⁠forgerock/local-release-tool-0.0.0.tgz Transitive 7.29.1 #⁠821
CVE-2026-84947

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/local-release-tool-0.0.0.tgz (Root Library)

   -> platform-node-0.94.2.tgz

     -> ❌ undici-7.29.0.tgz (Vulnerable Library)

Low 3.7 Transitive undici-7.29.0.tgz @⁠forgerock/local-release-tool-0.0.0.tgz Transitive 7.29.1 #⁠821
CVE-2026-18540

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> @⁠forgerock/local-release-tool-0.0.0.tgz (Root Library)

   -> platform-node-0.94.2.tgz

     -> ❌ undici-7.29.0.tgz (Vulnerable Library)

Low 3.7 Transitive undici-7.29.0.tgz @⁠forgerock/local-release-tool-0.0.0.tgz Transitive 7.29.1 #⁠821

Total libraries scanned: 272
Scan token: 4ad772cf818a4ffba1ccdfa91f77c634