Skip to content

Update dependency nexmo to v2.9.0#14

Open
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/nexmo-2.x-lockfile
Open

Update dependency nexmo to v2.9.0#14
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/nexmo-2.x-lockfile

Conversation

@mend-for-github-com
Copy link

@mend-for-github-com mend-for-github-com bot commented May 30, 2025

This PR contains the following updates:

Package Type Update Change
nexmo dependencies minor 2.8.02.9.0

By merging this PR, the issue #6 will be automatically resolved and closed:

Severity CVSS Score Vulnerability
Critical Critical 9.8 CVE-2021-3918
High High 7.5 CVE-2022-24999
High High 7.5 CVE-2025-65945

Release Notes

nexmo/nexmo-node (nexmo)

v2.9.0

Compare Source

  • FIXED: #​295 - Nexmo constructor changes of given options object
  • ADDED: Optional target_api_key parameter for the number.buy() and number.cancel() methods.
  • ADDED: Typings for Messages API
  • UPDATED: Private Key strings now replaces \n with newlines for easier usage in environment variables.

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label May 30, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nexmo-2.x-lockfile branch from 4e2fdda to d8d3776 Compare December 4, 2025 15:13
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nexmo-2.x-lockfile branch from d8d3776 to 5274f62 Compare February 12, 2026 14:09
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nexmo-2.x-lockfile branch from 5274f62 to c7cea97 Compare February 14, 2026 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants