Skip to content

Update dependency pug to v2.0.4#12

Open
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/pug-2.x-lockfile
Open

Update dependency pug to v2.0.4#12
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/pug-2.x-lockfile

Conversation

@mend-for-github-com
Copy link
Copy Markdown

@mend-for-github-com mend-for-github-com bot commented May 30, 2025

This PR contains the following updates:

Package Type Update Change
pug (source) dependencies patch 2.0.32.0.4

By merging this PR, the issue #4 will be automatically resolved and closed:

Severity CVSS Score Vulnerability
High High 7.2 CVE-2021-23337
Medium Medium 6.5 CVE-2026-2950
Medium Medium 5.3 CVE-2021-23343

Release Notes

pugjs/pug (pug)

v2.0.4: 2.0.4

Compare Source

  • fix: improve error message when requiring a filter that's not installed
  • fix: toJSON is now only called on object-like values
  • fix: preLex plugins were not called when compiling from a string
  • perf: add "files" property to exclude un-used files from package and reduce install size
  • feat: support ... spread attributes when compiling to JSX N.B. this will not work when rendering to HTML

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label May 30, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/pug-2.x-lockfile branch 2 times, most recently from 3710932 to 68fff82 Compare October 1, 2025 09:48
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/pug-2.x-lockfile branch from 68fff82 to 54a91cf Compare October 21, 2025 08:26
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/pug-2.x-lockfile branch from 54a91cf to abbad43 Compare January 22, 2026 15:15
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/pug-2.x-lockfile branch 3 times, most recently from a274581 to 54f89ee Compare April 2, 2026 06:45
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/pug-2.x-lockfile branch from 54f89ee to 47dc527 Compare April 13, 2026 07:54
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/pug-2.x-lockfile branch from 47dc527 to 4d8c96f Compare April 18, 2026 07:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants