New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 4 vulnerabilities #282

Open

snyk-bot wants to merge 1 commit into master from snyk-fix-86fe0b5917cd17bd767a77515aa3ecbf

snyk-bot commented Jan 26, 2022

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- benchmarks/markdown_slug/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	/1000 Why?	Open Redirect SNYK-JS-NODEFORGE-2330875	Yes	Proof of Concept
	/1000 Why?	Prototype Pollution SNYK-JS-NODEFORGE-2331908	Yes	No Known Exploit
	/1000 Why?	Information Exposure SNYK-JS-SIMPLEGET-2361683	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 250 commits.

441e6da chore(release): Publish
ed1a9b5 fix(gatsby-cli): relax error location validation and ignore extra fields (fix(gatsby-cli): relax error location validation and ignore extra fields gatsbyjs/gatsby#34559) (fix(gatsby-cli): relax error location validation and ignore extra fields (#34559) gatsbyjs/gatsby#34588)
e39f6cd fix(gatsby): don't remove onPluginInit in graphql-engine (fix(gatsby): don't remove onPluginInit in graphql-engine gatsbyjs/gatsby#34558) (fix(gatsby): don't remove onPluginInit in graphql-engine (#34558) gatsbyjs/gatsby#34586)
17e8698 feat(gatsby-plugin-gatsby-cloud): request customer feedback (feat(gatsby-plugin-gatsby-cloud): request customer feedback gatsbyjs/gatsby#34471)
94ffe33 chore(docs): Update client-only self-hosting instructions (chore(docs): Update client-only self-hosting instructions gatsbyjs/gatsby#34537)
e1e55c9 chore(docs): Update FS route api client only splat description (chore(docs): Update FS route api client only splat description gatsbyjs/gatsby#34546)
e9cd0ba chore(docs): Update links on gatsby-for-ecommerce (chore(docs): Update links on gatsby-for-ecommerce gatsbyjs/gatsby#34517)
1f28c1c chore(changelogs): update changelogs (chore(changelogs): update changelogs gatsbyjs/gatsby#34544)
d20c97b fix: add missing dependencies (fix: add missing dependencies gatsbyjs/gatsby#28759)
42ed5ef fix(plugin-schema-snapshot): unlink file on init (fix(plugin-schema-snapshot): unlink file on init gatsbyjs/gatsby#34527)
195188c docs(migrating-from-v3-to-v4): correct getNode snippet (docs(migrating-from-v3-to-v4): correct getNode snippet gatsbyjs/gatsby#34543)
d39265f docs(migrating-from-v2-to-v3): correct getNode snippet (docs(migrating-from-v2-to-v3): correct getNode snippet gatsbyjs/gatsby#34542)
bb85cef chore(release): Publish next
022ce14 fix(deps): update starters and examples gatsby packages to ^4.5.4 (fix(deps): update starters and examples gatsby packages to ^4.5.4 gatsbyjs/gatsby#34541)
3954944 fix(gatsby-remark-images): regenerate markdown when used image changes (fix(gatsby-remark-images): regenerate markdown when used image changes gatsbyjs/gatsby#34433)
f5bb0b6 chore(circleci): pin renovate cli version (chore(circleci): pin renovate cli version gatsbyjs/gatsby#34536)
77e4bb0 fix(gatsby): handle session storage not being available (fix(gatsby): handle session storage not being available gatsbyjs/gatsby#34525)
d2ba1f9 perf: move id: eq fast path handling to node-model so it's shared between query running strategies (perf: move id.eq fast path handling to node-model so it's shared between query running strategies gatsbyjs/gatsby#34520)
a3fa646 feat(gatsby-sharp): create more resilient wrapper around sharp (feat(gatsby-sharp): create more resilient wrapper around sharp gatsbyjs/gatsby#34339)
d319983 chore(changelogs): update changelogs (chore(changelogs): update changelogs gatsbyjs/gatsby#34521)
f10d0e5 feat(gatsby): content sync debugging tweaks (feat(gatsby): content sync debugging tweaks gatsbyjs/gatsby#34487)
15e549c fix(deps): update starters and examples - gatsby (fix(deps): update starters and examples - gatsby gatsbyjs/gatsby#34515)
7387918 chore(docs): Update links on plugins overview doc (chore(docs): Update links on plugins overview doc gatsbyjs/gatsby#34479)
44b2ef5 fix(create-gatsby): Respect telemetry disable (fix(create-gatsby): Respect telemetry disable gatsbyjs/gatsby#34495)

See the full diff

Package name: gatsby-plugin-manifest

The new version differs by 250 commits.

0a455df chore(release): Publish
91dc167 fix(gatsby): don't log FAST_DEV message for each worker (fix(gatsby): don't log FAST_DEV message for each worker gatsbyjs/gatsby#32961) (fix(gatsby): don't log FAST_DEV message for each worker (#32961) gatsbyjs/gatsby#32967)
f936c93 fix(gatsby): set staticQueryResultHash to new hash on data change (fix(gatsby): Set staticQueryResultHash to new hash gatsbyjs/gatsby#32949) (fix(gatsby): set staticQueryResultHash to new hash on data change (#32949) gatsbyjs/gatsby#32966)
ea161ce feat(gatsby-graphiql-explorer): upgrade to webpack 5 (feat(gatsby-graphiql-explorer): upgrade to webpack 5 gatsbyjs/gatsby#30642)
944e381 chore(release): Publish next
d6326df fix(gatsby-core-utils): Switch `auth` option from got to username/password (fix(gatsby-core-utils): Switch auth option from got to username/password gatsbyjs/gatsby#32665)
cf9c066 fix(gatsby): add this typings to actions (fix(gatsby): add this typings to actions gatsbyjs/gatsby#32210)
53aa88e chore: enable test parallelism (chore: enable test parallelism gatsbyjs/gatsby#32766)
b7deabc fix(deps): update starters and examples - gatsby (fix(deps): update starters and examples - gatsby gatsbyjs/gatsby#32843)
6025c84 chore(deps): update dependency katex to ^0.13.13 for gatsby-remark-katex (chore(deps): update dependency katex to ^0.13.13 for gatsby-remark-katex gatsbyjs/gatsby#32567)
d87c5cb chore: enable lmdb by default and update node for next major (feat: enable lmdb by default and update node gatsbyjs/gatsby#32695)
818d6c1 feat(gatsby-plugin-gatsby-cloud): Add `disablePreviewUI` option (feat(gatsby-plugin-gatsby-cloud): Add disablePreviewUI option gatsbyjs/gatsby#32907)
f556a00 chore: update changelogs (chore: update changelogs gatsbyjs/gatsby#32924)
aba5eba feat(gatsby): enable webpack caching in development for everyone (feat(gatsby): enable webpack caching in development for everyone gatsbyjs/gatsby#32922)
ac7bd4e feat(gatsby-source-wordpress): allow path to js file for beforeChangeNode option (feat(gatsby-source-wordpress): allow path to js file for beforeChangeNode option gatsbyjs/gatsby#32901)
1a87a8a docs(gatsby-source-wordpress): document content sync (docs(gatsby-source-wordpress): document content sync gatsbyjs/gatsby#32768)
417df15 chore: re-generate changelogs (chore: re-generate changelogs gatsbyjs/gatsby#32886)
1810874 fix(gatsby-source-wordpress): draft previews (fix(gatsby-source-wordpress): draft previews gatsbyjs/gatsby#32915)
7c72ab8 chore(gatsby): remove unused packages (chore(gatsby): remove unused packages gatsbyjs/gatsby#32903)
afb06d7 chore(docs): Add hint for MDX plugin in remark-plugin-tutorial (chore(docs): Add hint for MDX plugin in remark-plugin-tutorial gatsbyjs/gatsby#32876)
1303ecb chore(docs): Update wording for "using-web-fonts" (chore(docs): Update wording for "using-web-fonts" gatsbyjs/gatsby#32902)
9589911 chore(docs): Fix code highlighting in part 6 (chore(docs): Fix code highlighting in part 6 gatsbyjs/gatsby#32900)
568d4ce feat(gatsby-source-drupal): Use the collection count from JSON:API extras to enable parallel API requests for cold builds (feat(gatsby-source-drupal): Use the collection count from JSON:API extras to enable parallel API requests for cold builds gatsbyjs/gatsby#32883)
41f5337 fix(deps): update typescript to ^4.29.3 (fix(deps): update typescript to ^4.29.3 gatsbyjs/gatsby#32614)

See the full diff

Package name: gatsby-plugin-sharp

The new version differs by 250 commits.

0a455df chore(release): Publish
91dc167 fix(gatsby): don't log FAST_DEV message for each worker (fix(gatsby): don't log FAST_DEV message for each worker gatsbyjs/gatsby#32961) (fix(gatsby): don't log FAST_DEV message for each worker (#32961) gatsbyjs/gatsby#32967)
f936c93 fix(gatsby): set staticQueryResultHash to new hash on data change (fix(gatsby): Set staticQueryResultHash to new hash gatsbyjs/gatsby#32949) (fix(gatsby): set staticQueryResultHash to new hash on data change (#32949) gatsbyjs/gatsby#32966)
ea161ce feat(gatsby-graphiql-explorer): upgrade to webpack 5 (feat(gatsby-graphiql-explorer): upgrade to webpack 5 gatsbyjs/gatsby#30642)
944e381 chore(release): Publish next
d6326df fix(gatsby-core-utils): Switch `auth` option from got to username/password (fix(gatsby-core-utils): Switch auth option from got to username/password gatsbyjs/gatsby#32665)
cf9c066 fix(gatsby): add this typings to actions (fix(gatsby): add this typings to actions gatsbyjs/gatsby#32210)
53aa88e chore: enable test parallelism (chore: enable test parallelism gatsbyjs/gatsby#32766)
b7deabc fix(deps): update starters and examples - gatsby (fix(deps): update starters and examples - gatsby gatsbyjs/gatsby#32843)
6025c84 chore(deps): update dependency katex to ^0.13.13 for gatsby-remark-katex (chore(deps): update dependency katex to ^0.13.13 for gatsby-remark-katex gatsbyjs/gatsby#32567)
d87c5cb chore: enable lmdb by default and update node for next major (feat: enable lmdb by default and update node gatsbyjs/gatsby#32695)
818d6c1 feat(gatsby-plugin-gatsby-cloud): Add `disablePreviewUI` option (feat(gatsby-plugin-gatsby-cloud): Add disablePreviewUI option gatsbyjs/gatsby#32907)
f556a00 chore: update changelogs (chore: update changelogs gatsbyjs/gatsby#32924)
aba5eba feat(gatsby): enable webpack caching in development for everyone (feat(gatsby): enable webpack caching in development for everyone gatsbyjs/gatsby#32922)
ac7bd4e feat(gatsby-source-wordpress): allow path to js file for beforeChangeNode option (feat(gatsby-source-wordpress): allow path to js file for beforeChangeNode option gatsbyjs/gatsby#32901)
1a87a8a docs(gatsby-source-wordpress): document content sync (docs(gatsby-source-wordpress): document content sync gatsbyjs/gatsby#32768)
417df15 chore: re-generate changelogs (chore: re-generate changelogs gatsbyjs/gatsby#32886)
1810874 fix(gatsby-source-wordpress): draft previews (fix(gatsby-source-wordpress): draft previews gatsbyjs/gatsby#32915)
7c72ab8 chore(gatsby): remove unused packages (chore(gatsby): remove unused packages gatsbyjs/gatsby#32903)
afb06d7 chore(docs): Add hint for MDX plugin in remark-plugin-tutorial (chore(docs): Add hint for MDX plugin in remark-plugin-tutorial gatsbyjs/gatsby#32876)
1303ecb chore(docs): Update wording for "using-web-fonts" (chore(docs): Update wording for "using-web-fonts" gatsbyjs/gatsby#32902)
9589911 chore(docs): Fix code highlighting in part 6 (chore(docs): Fix code highlighting in part 6 gatsbyjs/gatsby#32900)
568d4ce feat(gatsby-source-drupal): Use the collection count from JSON:API extras to enable parallel API requests for cold builds (feat(gatsby-source-drupal): Use the collection count from JSON:API extras to enable parallel API requests for cold builds gatsbyjs/gatsby#32883)
41f5337 fix(deps): update typescript to ^4.29.3 (fix(deps): update typescript to ^4.29.3 gatsbyjs/gatsby#32614)

See the full diff

Package name: gatsby-transformer-sharp

The new version differs by 250 commits.

0a455df chore(release): Publish
91dc167 fix(gatsby): don't log FAST_DEV message for each worker (fix(gatsby): don't log FAST_DEV message for each worker gatsbyjs/gatsby#32961) (fix(gatsby): don't log FAST_DEV message for each worker (#32961) gatsbyjs/gatsby#32967)
f936c93 fix(gatsby): set staticQueryResultHash to new hash on data change (fix(gatsby): Set staticQueryResultHash to new hash gatsbyjs/gatsby#32949) (fix(gatsby): set staticQueryResultHash to new hash on data change (#32949) gatsbyjs/gatsby#32966)
ea161ce feat(gatsby-graphiql-explorer): upgrade to webpack 5 (feat(gatsby-graphiql-explorer): upgrade to webpack 5 gatsbyjs/gatsby#30642)
944e381 chore(release): Publish next
d6326df fix(gatsby-core-utils): Switch `auth` option from got to username/password (fix(gatsby-core-utils): Switch auth option from got to username/password gatsbyjs/gatsby#32665)
cf9c066 fix(gatsby): add this typings to actions (fix(gatsby): add this typings to actions gatsbyjs/gatsby#32210)
53aa88e chore: enable test parallelism (chore: enable test parallelism gatsbyjs/gatsby#32766)
b7deabc fix(deps): update starters and examples - gatsby (fix(deps): update starters and examples - gatsby gatsbyjs/gatsby#32843)
6025c84 chore(deps): update dependency katex to ^0.13.13 for gatsby-remark-katex (chore(deps): update dependency katex to ^0.13.13 for gatsby-remark-katex gatsbyjs/gatsby#32567)
d87c5cb chore: enable lmdb by default and update node for next major (feat: enable lmdb by default and update node gatsbyjs/gatsby#32695)
818d6c1 feat(gatsby-plugin-gatsby-cloud): Add `disablePreviewUI` option (feat(gatsby-plugin-gatsby-cloud): Add disablePreviewUI option gatsbyjs/gatsby#32907)
f556a00 chore: update changelogs (chore: update changelogs gatsbyjs/gatsby#32924)
aba5eba feat(gatsby): enable webpack caching in development for everyone (feat(gatsby): enable webpack caching in development for everyone gatsbyjs/gatsby#32922)
ac7bd4e feat(gatsby-source-wordpress): allow path to js file for beforeChangeNode option (feat(gatsby-source-wordpress): allow path to js file for beforeChangeNode option gatsbyjs/gatsby#32901)
1a87a8a docs(gatsby-source-wordpress): document content sync (docs(gatsby-source-wordpress): document content sync gatsbyjs/gatsby#32768)
417df15 chore: re-generate changelogs (chore: re-generate changelogs gatsbyjs/gatsby#32886)
1810874 fix(gatsby-source-wordpress): draft previews (fix(gatsby-source-wordpress): draft previews gatsbyjs/gatsby#32915)
7c72ab8 chore(gatsby): remove unused packages (chore(gatsby): remove unused packages gatsbyjs/gatsby#32903)
afb06d7 chore(docs): Add hint for MDX plugin in remark-plugin-tutorial (chore(docs): Add hint for MDX plugin in remark-plugin-tutorial gatsbyjs/gatsby#32876)
1303ecb chore(docs): Update wording for "using-web-fonts" (chore(docs): Update wording for "using-web-fonts" gatsbyjs/gatsby#32902)
9589911 chore(docs): Fix code highlighting in part 6 (chore(docs): Fix code highlighting in part 6 gatsbyjs/gatsby#32900)
568d4ce feat(gatsby-source-drupal): Use the collection count from JSON:API extras to enable parallel API requests for cold builds (feat(gatsby-source-drupal): Use the collection count from JSON:API extras to enable parallel API requests for cold builds gatsbyjs/gatsby#32883)
41f5337 fix(deps): update typescript to ^4.29.3 (fix(deps): update typescript to ^4.29.3 gatsbyjs/gatsby#32614)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


          fix: benchmarks/markdown_slug/package.json to reduce vulnerabilities

e37d1a6

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2330875
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2331908
- https://snyk.io/vuln/SNYK-JS-SIMPLEGET-2361683

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet