Update dependency couchbase to ^2.6.12 - #9
Security Report
| Vulnerability | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|---|---|
CVE-2025-13465Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> async-2.6.1.tgz (Root Library) -> ❌ lodash-4.17.11.tgz (Vulnerable Library) |
 Critical |
9.9 | Not Defined | 0.1% | Transitive lodash-4.17.11.tgz |
async-2.6.1.tgz | Transitive lodash-amd - 4.17.23,lodash - 4.17.23,lodash-es - 4.17.23 |
None |
CVE-2021-43138Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> ❌ async-2.6.1.tgz (Vulnerable Library) |
 High |
7.8 | Not Defined | 0.70000005% | Direct async-2.6.1.tgz |
async-2.6.1.tgz | 2.6.4 | None |
CVE-2020-8203Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> async-2.6.1.tgz (Root Library) -> ❌ lodash-4.17.11.tgz (Vulnerable Library) |
High |
7.4 | Not Defined | 2.5% | Transitive lodash-4.17.11.tgz |
async-2.6.1.tgz | 2.6.2 | None |
CVE-2021-23337Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> async-2.6.1.tgz (Root Library) -> ❌ lodash-4.17.11.tgz (Vulnerable Library) |
High |
7.2 | Proof of concept | 0.70000005% | Transitive lodash-4.17.11.tgz |
async-2.6.1.tgz | 2.6.2 | None |
CVE-2022-25883Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> ❌ semver-5.6.0.tgz (Vulnerable Library) |
 Medium |
5.3 | Proof of concept | 0.6% | Direct semver-5.6.0.tgz |
semver-5.6.0.tgz | 5.7.2 | None |
CVE-2020-28500Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> async-2.6.1.tgz (Root Library) -> ❌ lodash-4.17.11.tgz (Vulnerable Library) |
Medium |
5.3 | Proof of concept | 0.2% | Transitive lodash-4.17.11.tgz |
async-2.6.1.tgz | Transitive lodash - 4.17.21,lodash-es - 4.17.21,lodash-rails - 4.17.21 |
None |
CVE-2017-16137Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> ❌ debug-3.2.6.tgz (Vulnerable Library) |
 Low |
3.7 | Not Defined | 0.1% | Direct debug-3.2.6.tgz |
debug-3.2.6.tgz | 3.2.7 | None |
Total libraries scanned: 8
Scan token: 665b9561fcba4559b4b1f8da734c0aca