eslint-commit-parser (1.0.0) potentially affected by unknown CVE via express-mocha-test (0.0.1)

express-mocha-test NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-mocha-test and may be impacted: - eslint-commit-parser 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6568...