Update dependency sass to v1.81.1#4
Security Report
You have successfully remediated 14 vulnerabilities, but introduced 27 new vulnerabilities in this branch.
❌ New vulnerabilities:
| Vulnerability | Severity | Vulnerable Library | Direct Library | Suggested Fix | Issue | |
|---|---|---|---|---|---|---|
CVE-2025-57820Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ devalue-5.1.1.tgz (Vulnerable Library) |
10.0 | Transitive devalue-5.1.1.tgz |
starlight-0.31.1.tgz | Transitive 5.3.2 |
None | |
CVE-941441-362681Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> sharp-0.32.6.tgz (Root Library) -> simple-get-4.0.1.tgz -> ❌ once-1.4.0.tgz (Vulnerable Library) |
9.8 | Transitive once-1.4.0.tgz |
sharp-0.32.6.tgz | None | ||
CVE-2026-39363Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ vite-6.1.0.tgz (Vulnerable Library) |
7.5 | Transitive vite-6.1.0.tgz |
starlight-0.31.1.tgz | Transitive Upgrade to version vite - 8.0.5 or greater |
None | |
CVE-2026-35209Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> unstorage-1.14.4.tgz -> h3-1.13.1.tgz -> ❌ defu-6.1.4.tgz (Vulnerable Library) |
7.5 | Transitive defu-6.1.4.tgz |
starlight-0.31.1.tgz | Transitive Upgrade to version defu - 6.1.5 or greater |
None | |
CVE-2026-33671Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> pluginutils-5.1.4.tgz -> ❌ picomatch-4.0.2.tgz (Vulnerable Library) |
7.5 | Transitive picomatch-4.0.2.tgz |
starlight-0.31.1.tgz | Transitive Upgrade to version picomatch - 4.0.4 or greater |
None | |
CVE-2025-54793Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
7.2 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive 5.12.8 |
None | |
CVE-2025-64764Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
7.1 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive astro - 5.15.8 |
None | |
CVE-2025-64525Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
6.5 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive astro - 5.15.5 |
None | |
CVE-2025-62522Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ vite-6.1.0.tgz (Vulnerable Library) |
6.5 | Transitive vite-6.1.0.tgz |
starlight-0.31.1.tgz | Transitive https://gitlab.com/remram44/taguette.git - v1.5.0 |
None | |
CVE-2025-61925Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
6.5 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive astro - 5.14.3 |
None | |
CVE-2025-32395Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ vite-6.1.0.tgz (Vulnerable Library) |
6.5 | Transitive vite-6.1.0.tgz |
starlight-0.31.1.tgz | Transitive 6.1.5 |
None | |
CVE-2026-41067Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
6.1 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive Upgrade to version astro - 6.1.6 or greater |
None | |
CVE-2025-65019Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ internal-helpers-0.5.1.tgz (Vulnerable Library) |
5.4 | Transitive internal-helpers-0.5.1.tgz |
starlight-0.31.1.tgz | Transitive @astrojs/internal-helpers - 0.7.5,https://github.com/withastro/astro.git - @astrojs/internal-helpers@0.7.5 |
None | |
CVE-2025-65019Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
5.4 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive @astrojs/internal-helpers - 0.7.5,https://github.com/withastro/astro.git - @astrojs/internal-helpers@0.7.5 |
None | |
CVE-2026-45028Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
5.3 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive Upgrade to version astro - 6.1.10 or greater |
None | |
CVE-2026-39365Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ vite-6.1.0.tgz (Vulnerable Library) |
5.3 | Transitive vite-6.1.0.tgz |
starlight-0.31.1.tgz | Transitive 6.4.2 |
None | |
CVE-2026-33769Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
5.3 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive Upgrade to version astro - 5.18.1 or greater |
None | |
CVE-2026-33672Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> pluginutils-5.1.4.tgz -> ❌ picomatch-4.0.2.tgz (Vulnerable Library) |
5.3 | Transitive picomatch-4.0.2.tgz |
starlight-0.31.1.tgz | Transitive Upgrade to version picomatch - 3.0.2 or greater |
None | |
CVE-2026-24001Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ diff-5.2.0.tgz (Vulnerable Library) |
5.3 | Transitive diff-5.2.0.tgz |
starlight-0.31.1.tgz | Transitive https://github.com/kpdecker/jsdiff.git - v4.0.4,https://github.com/kpdecker/jsdiff.git - v5.2.2,https://github.com/kpdecker/jsdiff.git - v8.0.3 |
None | |
CVE-2025-64765Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
5.3 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive astro - 5.15.8 |
None | |
CVE-2025-31486Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ vite-6.1.0.tgz (Vulnerable Library) |
5.3 | Transitive vite-6.1.0.tgz |
starlight-0.31.1.tgz | Transitive 6.1.4 |
None | |
CVE-2025-31125Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ vite-6.1.0.tgz (Vulnerable Library) |
5.3 | Transitive vite-6.1.0.tgz |
starlight-0.31.1.tgz | Transitive 6.1.3 |
None | |
CVE-2025-30208Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ vite-6.1.0.tgz (Vulnerable Library) |
5.3 | Transitive vite-6.1.0.tgz |
starlight-0.31.1.tgz | Transitive 6.1.2 |
None | |
CVE-2025-58752Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ vite-6.1.0.tgz (Vulnerable Library) |
4.3 | Transitive vite-6.1.0.tgz |
starlight-0.31.1.tgz | Transitive 6.3.6 |
None | |
CVE-2025-58751Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> astro-5.3.0.tgz -> ❌ vite-6.1.0.tgz (Vulnerable Library) |
4.3 | Transitive vite-6.1.0.tgz |
starlight-0.31.1.tgz | Transitive 6.3.6 |
None | |
CVE-2025-64757Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
3.5 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive astro - 5.14.3 |
None | |
CVE-2025-64745Path to dependency file: /docs/package.json Path to vulnerable library: /docs/package.json Dependency Hierarchy: -> starlight-0.31.1.tgz (Root Library) -> ❌ astro-5.3.0.tgz (Vulnerable Library) |
2.7 | Transitive astro-5.3.0.tgz |
starlight-0.31.1.tgz | Transitive astro - 5.15.6 |
None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2025-4565 | protobuf-4.25.6-cp37-abi3-manylinux2014_x86_64.whl |
| CVE-2025-50181 | urllib3-1.26.20-py2.py3-none-any.whl |
| CVE-2025-8869 | pip-25.0.1-py3-none-any.whl |
| CVE-2026-3219 | pip-25.0.1-py3-none-any.whl |
| CVE-2026-44431 | urllib3-1.26.20-py2.py3-none-any.whl |
| CVE-2026-1703 | pip-25.0.1-py3-none-any.whl |
| CVE-2025-50182 | urllib3-1.26.20-py2.py3-none-any.whl |
| CVE-2025-71176 | pytest-8.3.5-py3-none-any.whl |
| CVE-2018-20225 | pip-25.0.1-py3-none-any.whl |
| CVE-2025-66418 | urllib3-1.26.20-py2.py3-none-any.whl |
| CVE-2026-6357 | pip-25.0.1-py3-none-any.whl |
| CVE-2026-0994 | protobuf-4.25.6-cp37-abi3-manylinux2014_x86_64.whl |
| CVE-2026-21441 | urllib3-1.26.20-py2.py3-none-any.whl |
| CVE-2025-66471 | urllib3-1.26.20-py2.py3-none-any.whl |
Base branch total remaining vulnerabilities: 36
Base branch commit: 6703a1908524f677bf251e7e88d0cbd33021958a
Total libraries scanned: 655
Scan token: e01f4f726186410586b695191024dd08