Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 25 vulnerabilities #126

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 25 vulnerabilities #126

wants to merge 1 commit into from

Conversation

adamlaska
Copy link
Owner

snyk-top-banner

Snyk has created this PR to fix 25 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Prototype Pollution
SNYK-JS-LODASH-567746		   731  
high severity Arbitrary Code Execution
SNYK-JS-HANDLEBARS-534478		   726  
critical severity Prototype Pollution
SNYK-JS-HANDLEBARS-534988		   704  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		   696  
high severity Prototype Pollution
SNYK-JS-LODASH-6139239		   696  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PRISMJS-1076581		   696  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PRISMJS-1585202		   696  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		   696  
high severity Prototype Pollution
SNYK-JS-LODASH-608086		   686  
high severity Code Injection
SNYK-JS-LODASH-1040724		   681  
high severity Remote Code Execution (RCE)
SNYK-JS-HANDLEBARS-1056767		   671  
medium severity Prototype Pollution
SNYK-JS-HANDLEBARS-567742		   646  
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		   631  
high severity Cross-site Scripting (XSS)
SNYK-JS-PRISMJS-597628		   629  
medium severity Prototype Pollution
SNYK-JS-HANDLEBARS-1279029		   601  
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764		   601  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BROWSERSLIST-1090194		   586  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		   586  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595		   586  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640		   586  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PRISMJS-1314893		   584  
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		   506  
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905		   506  
medium severity Cross-site Scripting (XSS)
SNYK-JS-PRISMJS-2404333		   484  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		   479  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Remote Code Execution (RCE)
🦉 Prototype Pollution
🦉 More lessons are available in Snyk Learn

@snyk-bot
fix: package.json & package-lock.json to reduce vulnerabilities
0f787d7 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534988
- https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
- https://snyk.io/vuln/SNYK-JS-LODASH-6139239
- https://snyk.io/vuln/SNYK-JS-PRISMJS-1076581
- https://snyk.io/vuln/SNYK-JS-PRISMJS-1585202
- https://snyk.io/vuln/SNYK-JS-SEMVER-3247795
- https://snyk.io/vuln/SNYK-JS-LODASH-608086
- https://snyk.io/vuln/SNYK-JS-LODASH-1040724
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-567742
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
- https://snyk.io/vuln/SNYK-JS-PRISMJS-597628
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1279029
- https://snyk.io/vuln/SNYK-JS-MINIMIST-559764
- https://snyk.io/vuln/SNYK-JS-BROWSERSLIST-1090194
- https://snyk.io/vuln/SNYK-JS-LODASH-1018905
- https://snyk.io/vuln/SNYK-JS-POSTCSS-1090595
- https://snyk.io/vuln/SNYK-JS-POSTCSS-1255640
- https://snyk.io/vuln/SNYK-JS-PRISMJS-1314893
- https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/SNYK-JS-PRISMJS-2404333
- https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818
@google-cla Google CLA
Copy link

google-cla bot commented Sep 5, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@socket-security Socket Security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/[email protected] None 0 9.65 kB phated
npm/[email protected] environment 0 224 kB ai
npm/[email protected] None 0 44.6 kB jonschlinkert
npm/[email protected] environment, filesystem 0 63 kB ai
npm/[email protected] None 0 2.1 MB ai, beneb, caniuse-lite
npm/[email protected] None +2 353 kB feedic
npm/[email protected] environment, filesystem 0 90.2 kB paulmillr
npm/[email protected] environment 0 11.3 kB jorgebucaran
npm/[email protected] filesystem, shell 0 113 kB abetomo
npm/[email protected] None 0 146 kB kilianvalkhof
npm/[email protected] None +1 516 kB feedic
npm/[email protected] None 0 12.4 kB lukeed
npm/[email protected] None 0 16.7 kB jonschlinkert
npm/[email protected] None 0 86.2 kB infusion
npm/[email protected] None 0 173 kB pipobscure
npm/[email protected] None 0 12.1 kB phated
npm/[email protected] eval, filesystem 0 38.6 kB rmassaioli
npm/[email protected] filesystem 0 2.78 MB jaylinski
npm/[email protected] None 0 4.48 kB webketje
npm/[email protected] None 0 48.5 kB jdalton
npm/[email protected] None 0 67.7 kB jdalton
npm/[email protected] None 0 9.71 kB wernerglinka
npm/[email protected] None 0 8.92 kB flipp
npm/[email protected] None +2 97.7 kB webketje
npm/[email protected] None 0 56.6 kB doowb
npm/[email protected] None 0 54.5 kB ljharb
npm/[email protected] None 0 298 kB suguru03
npm/[email protected] None 0 35.7 kB chicoxyzzy
npm/[email protected] None +2 106 kB feedic
npm/[email protected] None +2 1.13 MB feedic
npm/[email protected] environment 0 11.4 kB alexeyraspopov
npm/[email protected] None 0 90 kB mrmlnc
npm/[email protected] None 0 27.2 kB evilebottnawi
npm/[email protected] environment, filesystem +1 547 kB ai
npm/[email protected] None 0 2.05 MB rundevelopment
npm/[email protected] filesystem 0 20.5 kB paulmillr
npm/[email protected] None 0 12.1 kB jonschlinkert
npm/[email protected] None 0 25.7 kB tootallnate
npm/[email protected] None 0 5.69 kB jonschlinkert
npm/[email protected] None 0 22.3 kB davidtheclark
npm/[email protected] None 0 5.93 kB kristerkari
npm/[email protected] None 0 6.51 kB jeddy3
npm/[email protected] None 0 25.7 kB jeddy3
npm/[email protected] None 0 11.3 kB xhmikosr
npm/[email protected] None 0 75.8 kB hudochenkov
npm/[email protected] None +1 620 kB kristerkari
npm/[email protected] environment, filesystem +1 1.68 MB hudochenkov
npm/substitute@https://github.com/segmentio/substitute/archive/0.1.0.tar.gz None 0 0 B
npm/[email protected] None 0 112 kB ai
npm/[email protected] environment 0 6.63 kB sindresorhus
npm/[email protected] None 0 5.93 kB kgryte
npm/[email protected] None 0 198 kB gajus
npm/[email protected] None 0 30.5 kB substack
npm/[email protected] environment, filesystem 0 144 kB ljharb
npm/[email protected] filesystem 0 1.3 MB isaacs
npm/[email protected] environment 0 30.9 kB sindresorhus
npm/[email protected] None 0 11 kB substack
npm/[email protected] None 0 12.5 kB dominictarr
npm/[email protected] Transitive: environment +1 64.2 kB bryce
npm/[email protected] None 0 11.1 kB dead_horse
npm/[email protected] None 0 4.28 kB tjholowaychuk
npm/[email protected] filesystem 0 26 kB raszi
npm/[email protected] None 0 3.5 kB sindresorhus
npm/[email protected] None 0 5.07 kB jonschlinkert
npm/[email protected] None 0 2.79 kB sindresorhus
npm/[email protected] None 0 22.9 kB jonschlinkert
npm/[email protected] None 0 12.6 kB jonschlinkert
npm/[email protected] filesystem 0 9.92 kB wooorm
npm/[email protected] None 0 4.33 kB dougwilson
npm/[email protected] None 0 2.97 kB sindresorhus
npm/[email protected] None 0 4.65 kB wooorm
npm/[email protected] None 0 2.71 kB tjholowaychuk
npm/[email protected] None 0 13 kB wooorm
npm/[email protected] None 0 15.7 kB barsh
npm/[email protected] None 0 38.1 kB typescript
npm/[email protected] None 0 20.9 kB gkz
npm/[email protected] None 0 42.1 kB chaijs
npm/[email protected] None 0 23 kB sindresorhus
npm/[email protected] None 0 26 kB substack
npm/[email protected] eval, filesystem Transitive: shell +1 820 kB alexlamsl
npm/[email protected] environment, network 0 1.13 MB matteo.collina
npm/[email protected] None 0 5.43 kB wooorm
npm/[email protected] None 0 34.9 kB wooorm
npm/[email protected] filesystem, unsafe +3 80 kB wooorm
npm/[email protected] None 0 5.65 kB wooorm
npm/[email protected] None 0 15.1 kB wooorm
npm/[email protected] None 0 55 kB wooorm
npm/[email protected] None 0 6.83 kB doowb
npm/[email protected] None 0 4.32 kB mikolalysenko
npm/[email protected] None 0 2.58 kB sindresorhus
npm/[email protected] None 0 12.5 kB wooorm
npm/[email protected] None 0 6.28 kB wooorm
npm/[email protected] None 0 9.85 kB wooorm
npm/[email protected] None 0 11.1 kB wooorm
npm/[email protected] None 0 6.26 kB wooorm
npm/[email protected] None 0 6.55 kB wooorm
npm/[email protected] None 0 6.55 kB wooorm
npm/[email protected] None 0 11.6 kB wooorm
npm/[email protected] None 0 6.87 kB wooorm
npm/[email protected] None 0 4.31 kB dougwilson
npm/[email protected] None +2 20.7 kB jonschlinkert
npm/[email protected] None 0 2.71 kB sindresorhus
npm/[email protected] None 0 2.62 kB mattmueller
npm/[email protected] environment, filesystem, shell 0 14.8 kB ai
npm/[email protected] environment, shell 0 14.7 kB sboudrias
npm/[email protected] None 0 533 kB garycourt
npm/[email protected] None 0 4.37 kB lydell
npm/[email protected] None 0 4.23 kB sindresorhus
npm/[email protected] None 0 9.51 kB jonschlinkert
npm/[email protected] None 0 5.48 kB tootallnate
npm/[email protected] None 0 34.7 kB broofa
npm/[email protected] environment, filesystem, unsafe 0 16.2 kB zertosh
npm/[email protected] None 0 16.6 kB kemitchell
npm/[email protected] None 0 7.54 kB wooorm
npm/[email protected] None 0 9.03 kB wooorm
npm/[email protected] None +3 72.9 kB wooorm
npm/[email protected] None 0 5.93 kB wooorm
npm/[email protected] None 0 6.76 kB wooorm
npm/[email protected] unsafe +1 23.6 kB wooorm
npm/[email protected] None 0 28.9 MB sideshowbarker
npm/[email protected] None 0 6.17 kB ianstormtaylor
npm/[email protected] None 0 13.3 kB domenic
npm/[email protected] None 0 16.7 kB domenic
npm/[email protected] None 0 4.16 kB nexdrew
npm/[email protected] environment 0 9.42 kB isaacs
npm/[email protected] None +1 7.49 kB iarna
npm/[email protected] None 0 3.16 kB sindresorhus
npm/[email protected] None +1 11.8 kB sindresorhus
npm/[email protected] None 0 5.27 kB mattmueller
npm/[email protected] None 0 5.03 kB mattmueller
npm/[email protected] None 0 2.96 kB zkat
npm/[email protected] None 0 12.2 kB isaacs
npm/[email protected] filesystem 0 14.7 kB jonschlinkert
npm/[email protected] None 0 4.67 kB mattesch
npm/[email protected] environment 0 4.08 kB sindresorhus
npm/[email protected] None 0 23.4 kB dylang
npm/[email protected] None 0 6.46 kB raynos
npm/[email protected] filesystem 0 8.75 kB bcoe
npm/[email protected] None 0 13.6 kB isaacs
npm/[email protected] filesystem 0 498 kB connec
npm/[email protected] environment 0 48.4 kB bcoe
npm/[email protected] environment, filesystem +1 243 kB bcoe

🚮 Removed packages: npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected])

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
do-not-merge
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@adamlaska @snyk-bot