Skip to content

fix(deps): SCA upgrades — immutable (react-activity-feed) - #2

Closed
tfelder-appsec wants to merge 1 commit into
mainfrom
fix/sca-immutable-2026-06-15
Closed

fix(deps): SCA upgrades — immutable (react-activity-feed)#2
tfelder-appsec wants to merge 1 commit into
mainfrom
fix/sca-immutable-2026-06-15

Conversation

@tfelder-appsec

@tfelder-appsec tfelder-appsec commented Jun 16, 2026

Copy link
Copy Markdown

Security: SCA dependency upgrades

Upgrades 1 vulnerable dependency identified via Snyk SCA scanning.

Changes

Library Before After CVEs fixed
immutable 4.0.0-rc.12 4.3.8 1

Linked Jira tickets

  • DEED-21 — immutable upgrade (SLA: 2026-07-31)

References


AppSec-generated. Questions? Ping #appsec.

Addresses: CVE-2026-29063 (Prototype Pollution, Critical)
Jira: DEED-21
SLA: 2026-07-31

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Re-trigger cubic

@randytarampi

Copy link
Copy Markdown
Member

Closed in #3 & #4.

@tfelder-appsec tfelder-appsec added the sca-fix Opened by automated SCA remediation label Aug 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

sca-fix Opened by automated SCA remediation

Development

Successfully merging this pull request may close these issues.

2 participants