Skip to content

js-yaml (mocha) found on node-v20.20.2-nsolid-v6.2.3-release #995

Open
Open
js-yaml (mocha) found on node-v20.20.2-nsolid-v6.2.3-release#995
Labels
HIGHHigh severity vulnerabilityMODERATEModerate severity vulnerabilityNPMNPM package vulnerabilitynode-v20.20.2-nsolid-v6.2.3-releaseN|Solid relatednsolid-v6.2N|Solid relatedsrcAuto-created vulnerability labelv20.20Auto-created vulnerability label
@github-actions

Description

@github-actions
github-actions
bot
opened on Apr 29, 2026

A new vulnerability for mocha 8.0.0 - 12.0.0-beta-2 was found:
Vulnerability ID: js-yaml
Vulnerability URL: https://github.com/advisories?query=js-yaml
Vulnerability Title: js-yaml
Main Dependency: src
Main Dependency Path: deps/cjs-module-lexer/src
Failed run: https://github.com/nodesource/nsolid-dependency-vuln-assessments/actions/runs/25106437311

Metadata

Metadata

Assignees

No one assigned

    Labels

    HIGHHigh severity vulnerabilityMODERATEModerate severity vulnerabilityNPMNPM package vulnerabilitynode-v20.20.2-nsolid-v6.2.3-releaseN|Solid relatednsolid-v6.2N|Solid relatedsrcAuto-created vulnerability labelv20.20Auto-created vulnerability label

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions