Update dependency opentok to v2.17.0 #10
Open
Mend for GitHub.com / WhiteSource Security Check
failed
May 22, 2026 in 3m 38s
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-2024-43800Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.17.1.tgz (Root Library) -> ❌ serve-static-1.14.1.tgz (Vulnerable Library) |
 Medium |
5.0 | Transitive serve-static-1.14.1.tgz |
express-4.17.1.tgz | Transitive 1.16.0 |
None |
CVE-2024-43799Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.17.1.tgz (Root Library) -> ❌ send-0.17.1.tgz (Vulnerable Library) |
Medium |
5.0 | Transitive send-0.17.1.tgz |
express-4.17.1.tgz | Transitive 0.19.0 |
None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2025-15284 | qs-6.5.2.tgz |
| CVE-2026-2391 | qs-6.5.2.tgz |
| CVE-2021-3918 | json-schema-0.2.3.tgz |
| CVE-2022-24999 | qs-6.5.2.tgz |
| CVE-2025-65945 | jws-3.2.2.tgz |
| CVE-2022-23541 | jsonwebtoken-8.5.1.tgz |
| CVE-2022-23539 | jsonwebtoken-8.5.1.tgz |
| CVE-2023-26136 | tough-cookie-2.5.0.tgz |
| CVE-2025-7783 | form-data-2.3.3.tgz |
| CVE-2022-23540 | jsonwebtoken-8.5.1.tgz |
| CVE-2023-28155 | request-2.88.2.tgz |
Base branch total remaining vulnerabilities: 187
Base branch commit: null
Total libraries scanned: 1595
Scan token: 6fe682452eae43cb93adb25bc29656a4
Loading