Description Target bun.lock
⚠️ Vulnerabilities (26)
Package
ID
Severity
Installed Version
Fixed Version
Links
http-cache-semantics
CVE-2026-93748
HIGH
4.2.0
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
katex
CVE-2026-103923
LOW
0.16.47
0.18.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
mermaid
CVE-2026-50159
MEDIUM
11.15.0
11.16.1, 10.9.8
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
mermaid
CVE-2026-71436
MEDIUM
11.15.0
10.9.8, 11.16.1
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
mermaid
CVE-2026-71437
MEDIUM
11.15.0
11.16.1
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
mermaid
CVE-2026-71439
MEDIUM
11.15.0
11.16.1
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
mermaid
CVE-2026-71438
LOW
11.15.0
11.16.1, 10.9.8
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
nanoid
CVE-2026-67213
HIGH
3.3.12
3.3.18, 5.1.6
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
nanoid
CVE-2026-67214
HIGH
3.3.12
3.3.16, 5.1.16
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
postcss
CVE-2026-73646
HIGH
8.5.15
8.5.18
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
postcss
CVE-2026-69153
MEDIUM
8.5.15
8.5.23
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
postcss-selector-parser
CVE-2026-104844
MEDIUM
6.1.4
7.1.6
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
sharp
GHSA-rgj7-g3m4-5g8c
HIGH
0.35.1
0.35.4
🔗 🔗 🔗 🔗 🔗 🔗 🔗
sharp
GHSA-wq5f-xc86-pv6w
HIGH
0.35.1
0.35.5
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
source-map-js
CVE-2026-93749
HIGH
1.2.1
1.2.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-19534
HIGH
8.10.0
6.28.1, 7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-84961
HIGH
8.10.0
7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-85152
HIGH
8.10.0
8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-18149
MEDIUM
8.10.0
7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-84890
MEDIUM
8.10.0
7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-84933
MEDIUM
8.10.0
7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-85014
MEDIUM
8.10.0
7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-85024
MEDIUM
8.10.0
6.28.1, 7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-18540
LOW
8.10.0
6.28.1, 7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-84947
LOW
8.10.0
7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
undici
CVE-2026-85008
LOW
8.10.0
7.29.1, 8.10.2
🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗 🔗
✅ No Misconfigurations found Reactions are currently unavailable
You can’t perform that action at this time.
Target
bun.lockhttp-cache-semanticskatexmermaidmermaidmermaidmermaidmermaidnanoidnanoidpostcsspostcsspostcss-selector-parsersharpsharpsource-map-jsundiciundiciundiciundiciundiciundiciundiciundiciundiciundiciundici✅ No Misconfigurations found