Skip to content

Update dependency nexmo to v2.7.0#25

Open
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/nexmo-2.x-lockfile
Open

Update dependency nexmo to v2.7.0#25
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/nexmo-2.x-lockfile

Conversation

@mend-for-github-com
Copy link

@mend-for-github-com mend-for-github-com bot commented Apr 12, 2025

This PR contains the following updates:

Package Type Update Change
nexmo dependencies patch 2.7.0-beta-12.7.0

By merging this PR, the issue #14 will be automatically resolved and closed:

Severity CVSS Score Vulnerability
Critical Critical 9.8 CVE-2021-3918
High High 7.5 CVE-2025-65945

Release Notes

nexmo/nexmo-node (nexmo)

v2.7.0

Compare Source

  • ADDED: Made apiKey and apiSecret optional when applicationId and privateKey are present in Nexmo constructor.

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Apr 12, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nexmo-2.x-lockfile branch from 376c0f4 to f1bf41a Compare May 8, 2025 08:23
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nexmo-2.x-lockfile branch from f1bf41a to d67340d Compare December 4, 2025 15:12
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nexmo-2.x-lockfile branch from d67340d to a635f8d Compare February 12, 2026 14:05
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nexmo-2.x-lockfile branch from a635f8d to b0f5aa1 Compare February 13, 2026 07:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants