Skip to content

Update checkmarx-ast-cli binaries with 2.3.44#150

Merged
cx-anurag-dalke merged 1 commit intomainfrom
feature/update_cli_2.3.44
Feb 5, 2026
Merged

Update checkmarx-ast-cli binaries with 2.3.44#150
cx-anurag-dalke merged 1 commit intomainfrom
feature/update_cli_2.3.44

Conversation

@cx-anurag-dalke
Copy link
Collaborator

Updates checkmarx-ast-cli to 2.3.44

Auto-generated by [create-pull-request][2]

@cx-ben-alvo
Copy link
Collaborator

Logo
Checkmarx One – Scan Summary & Details778c6b71-e148-44ee-a7d8-81f25d114101

New Issues (4)

Checkmarx found the following issues in this Pull Request

# Severity Issue Source File / Package Checkmarx Insight
1 HIGH CVE-2026-23950 Npm-tar-7.4.3
detailsRecommended version: 7.5.7
Description: node-tar,a Tar for Node.js, has a race condition vulnerability in versions through 7.5.3. This is due to an incomplete handling of Unicode path col...
Attack Vector: NETWORK
Attack Complexity: LOW
Vulnerable Package
2 HIGH CVE-2026-24842 Npm-tar-7.4.3
detailsRecommended version: 7.5.7
Description: node-tar, a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path ...
Attack Vector: NETWORK
Attack Complexity: LOW
Vulnerable Package
3 MEDIUM CVE-2025-13465 Npm-lodash-4.17.21
detailsRecommended version: 4.17.23
Description: Lodash versions from 4.0.0 through 4.17.22 are vulnerable to Prototype Pollution in the "_.unset" and "_.omit" functions. An attacker can pass craf...
Attack Vector: NETWORK
Attack Complexity: LOW
Vulnerable Package
4 LOW CVE-2026-24001 Npm-diff-5.0.0
detailsRecommended version: 5.2.1
Description: jsdiff is a JavaScript text differencing implementation. Prior to versions 4.0.3, 5.x prior to 5.2.1 and 6.x through 8.x prior to 8.0.3, attempting...
Attack Vector: NETWORK
Attack Complexity: LOW
Vulnerable Package

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

@cx-anurag-dalke cx-anurag-dalke merged commit 3b606b8 into main Feb 5, 2026
5 of 7 checks passed
@cx-anurag-dalke cx-anurag-dalke deleted the feature/update_cli_2.3.44 branch February 5, 2026 14:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants