Skip to content

Update dependency shortid to v2.2.17 (main)#63

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-shortid-2.x-lockfile
Open

Update dependency shortid to v2.2.17 (main)#63
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-shortid-2.x-lockfile

Conversation

@mend-for-github-com
Copy link
Copy Markdown

@mend-for-github-com mend-for-github-com Bot commented Aug 4, 2025

This PR contains the following updates:

Package Type Update Change
shortid dependencies patch 2.2.142.2.17

By merging this PR, the issue #50 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
Medium Medium 4.3 CVE-2024-55565

Unreachable


Release Notes

dylang/shortid (shortid)

v2.2.17

Compare Source

  • Fixed CVE warning by moving to Nano ID 3.

v2.2.16

Compare Source

  • Add deprecation notice to project readme (by Russell Dunphy).

v2.2.15

Compare Source

  • Update REDUCE_TIME to generate smaller ID.

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label Aug 4, 2025
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-shortid-2.x-lockfile branch from 38cf867 to 20ac4b6 Compare May 1, 2026 05:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants