Skip to content

Update dependency @flue/runtime to v2 - #423

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/flue-runtime-2.x
Open

mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/flue-runtime-2.x

Update dependency @flue/runtime to v2

c00f25d
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / WhiteSource Security Check failed Oct 23, 2026 in 30m 59s

Security Report

You have successfully remediated 3 vulnerabilities, but introduced 2 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue
CVE-2026-104850

Path to dependency file: /tutorials/voice_ai_flue-javascript-workshop/project/package.json

Path to vulnerable library: /tutorials/voice_ai_flue-javascript-workshop/project/package.json

Dependency Hierarchy:

-> runtime-2.0.0.tgz (Root Library)

   -> ❌ client-2.0.0.tgz (Vulnerable Library)

High 7.5 Transitive client-2.0.0.tgz runtime-2.0.0.tgz Transitive @⁠modelcontextprotocol/client - 2.2.0 None
CVE-2026-111769

Path to dependency file: /tutorials/voice_ai_flue-javascript-workshop/project/package.json

Path to vulnerable library: /tutorials/voice_ai_flue-javascript-workshop/project/package.json

Dependency Hierarchy:

-> runtime-2.0.0.tgz (Root Library)

   -> ❌ client-2.0.0.tgz (Vulnerable Library)

Medium 6.5 Transitive client-2.0.0.tgz runtime-2.0.0.tgz Transitive 2.3.0 None

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
CVE-2026-102277 brace-expansion-5.0.9.tgz
CVE-2026-102278 brace-expansion-5.0.9.tgz
CVE-2026-102276 brace-expansion-5.0.9.tgz

Base branch total remaining vulnerabilities: 356
Base branch commit: f79ded260d5aec34fd2a884f6f3f261fec40a92a


Total libraries scanned: 1917

Scan token: 53dc752860a74bef902ffbaf57754866