Bump mongoose from 9.6.3 to 9.8.1 - #366
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Codacy Production / Codacy Static Code Analysis
required action
Jul 28, 2026 in 0s
2 new security issues (0 max.).
Issues
======
+ Solved 2
- Added 2
See the complete overview on Codacy
Annotations
Check warning on line 22 in pnpm-lock.yaml
codacy-production / Codacy Static Code Analysis
pnpm-lock.yaml#L22
Insecure dependency npm/lodash@4.17.21 (CVE-2025-13465: lodash: prototype pollution in _.unset and _.omit functions) (update to 4.17.23)
Check warning on line 22 in pnpm-lock.yaml
codacy-production / Codacy Static Code Analysis
pnpm-lock.yaml#L22
Insecure dependency npm/lodash@4.17.21 (CVE-2026-2950: lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass) (update to 4.18.0)
Loading