Skip to content

Bump the npm_and_yarn group across 1 directory with 3 updates

60137f0
Select commit
Loading
Failed to load commit list.
Merged

Bump the npm_and_yarn group across 1 directory with 3 updates #84

Bump the npm_and_yarn group across 1 directory with 3 updates
60137f0
Select commit
Loading
Failed to load commit list.
Debricked / Vulnerability analysis completed Mar 26, 2026 in 12s

An automation triggered a pipeline warning

Found 2 vulnerabilities. An additional 0 vulnerabilities have been marked as unaffected.

Output from Automations

4 rules were checked:


If a new dependency is added where the license risk is at least medium

then notify all users in the group admins by email

✔️ The rule did not trigger. Manage rule



If a dependency contains a vulnerability which has not been marked as unaffected and which has not triggered this rule for this dependency before

then notify all users in the group admins by email

✔️ The rule did not trigger. Manage rule



If there is a dependency where the license risk is at least high

then send a pipeline warning

✔️ The rule did not trigger. Manage rule



If a dependency contains a vulnerability which has not been marked as unaffected

then send a pipeline warning

⚠️ The rule triggered for the following vulnerabilities, causing a pipeline warning. Manage rule

Vulnerability CVSS2 CVSS3 CVSS4 Dependency Dependency Licenses
CVE-2025-69873 N/A 2.9 N/A ajv (npm) MIT
CVE-2025-5889 2.1 3.1 1.3 brace-expansion (npm) MIT