New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 6 vulnerabilities #1878

Open

snyk-bot wants to merge 1 commit into master from snyk-fix-c3678b697062a5481bc29513c85aa787

snyk-bot commented Apr 19, 2023

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- examples/using-remark-copy-linked-files/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Open Redirect SNYK-JS-NODEFORGE-2330875	Yes	Proof of Concept
	529/1000 Why? Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-NODEFORGE-2331908	Yes	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 250 commits.

2c324f6 chore(release): Publish
55c7183 feat(contentful): add support for tables in Rich Text (feat(contentful): add support for tables in Rich Text gatsbyjs/gatsby#33870)
053180a fix(gatsby): Better TS compilation error (fix(gatsby): Better TS compilation error gatsbyjs/gatsby#35594)
0cf0bd9 chore(release): Publish next
9a91295 fix(gatsby-plugin-image): fix image flickers (fix(gatsby-plugin-image): fix image flickers gatsbyjs/gatsby#35226)
f358dc3 chore(release): Publish next
966aca8 feat(gatsby): Improvements to GraphQL TypeScript Generation (feat(gatsby): Improvements to GraphQL TypeScript Generation gatsbyjs/gatsby#35581)
8bad9b3 perf(gatsby): Minify page-data (perf(gatsby): Minify page-data gatsbyjs/gatsby#35578)
39e9840 chore(gatsby): Expose `serverDataStatus` field in SSR type declaration file (chore(gatsby): Expose serverDataStatus field in SSR type declaration file gatsbyjs/gatsby#35505)
ebd63b2 feat(gatsby-source-wordpress): use image cdn for non-resizable images in html (svgs/gifs mainly) (feat(gatsby-source-wordpress): use image cdn for non-resizable images in html (svgs/gifs mainly) gatsbyjs/gatsby#35529)
5e51519 fix(gatsby-source-wordpress): update test deps and fix int tests (fix(gatsby-source-wordpress): update test deps and fix int tests gatsbyjs/gatsby#35582)
128c7bb feat(gatsby-source-wordpress): always include draft slugs (feat(gatsby-source-wordpress): always include draft slugs gatsbyjs/gatsby#35573)
abc6dca feat(gatsby-plugin-image): add check for node.gatsbyImage in the getImage helper (feat(gatsby-plugin-image): add check for node.gatsbyImage in the getImage helper gatsbyjs/gatsby#35507)
e51c3a3 chore(release): Publish next
c9d98a4 feat(gatsby): Initial GraphQL Typegen Implementation (feat(gatsby): Initial GraphQL Typegen Implementation gatsbyjs/gatsby#35487)
17cbc7c fix(deps): update minor and patch dependencies for gatsby-source-graphql (fix(deps): update minor and patch dependencies for gatsby-source-graphql gatsbyjs/gatsby#35545)
10752ed fix(deps): update dependency fs-extra to ^10.1.0 (fix(deps): update dependency fs-extra to ^10.1.0 gatsbyjs/gatsby#34976)
0abdcd6 fix(deps): update dependency coffeescript to ^2.7.0 for gatsby-plugin-coffeescript (fix(deps): update dependency coffeescript to ^2.7.0 for gatsby-plugin-coffeescript gatsbyjs/gatsby#35550)
7cda002 fix(deps): update dependency eslint-plugin-import to ^2.26.0 (fix(deps): update dependency eslint-plugin-import to ^2.26.0 gatsbyjs/gatsby#35551)
3e74a9f fix(deps): update dependency eslint-plugin-react-hooks to ^4.5.0 (fix(deps): update dependency eslint-plugin-react-hooks to ^4.5.0 gatsbyjs/gatsby#35552)
fb98116 fix(deps): update minor and patch dependencies for gatsby-source-drupal (fix(deps): update minor and patch dependencies for gatsby-source-drupal gatsbyjs/gatsby#35554)
c09287a chore(deps): update starters and examples (chore(deps): update starters and examples gatsbyjs/gatsby#35565)
bf854ca fix(deps): update dependency prop-types to ^15.8.1 for gatsby-link (fix(deps): update dependency prop-types to ^15.8.1 for gatsby-link gatsbyjs/gatsby#35291)
71eb414 chore(deps): update dependency typescript to ^4.6.4 (chore(deps): update dependency typescript to ^4.6.4 gatsbyjs/gatsby#34984)

See the full diff

Package name: gatsby-plugin-google-analytics

The new version differs by 250 commits.

2cfb64b chore(release): Publish
c132f2d feat(gatsby-plugin-google-gtag): Add `delayOnRouteUpdate` option (feat(gatsby-plugin-google-gtag): Add delayOnRouteUpdate option gatsbyjs/gatsby#37017)
3032a1b fix(gatsby): Use xstate `predictableActionArguments` & update to 4.34 (fix(gatsby): Use xstate predictableActionArguments & update to 4.34 gatsbyjs/gatsby#36342)
aca64b7 chore: Add constraints to renovate (chore: Add constraints to renovate gatsbyjs/gatsby#37047)
f94db78 fix(gatsby-transformer-csv): Fix high memory consumption (fix(gatsby-transformer-csv): Fix high memory consumption gatsbyjs/gatsby#36610)
f158930 test: e2e tests for Slices API (test: e2e tests for Slices API gatsbyjs/gatsby#36746)
9d67c13 chore(docs): Google Analytics: use gtag.js plugin (chore(docs): Google Analytics: use gtag.js plugin gatsbyjs/gatsby#36984)
8569655 chore(gatsby-plugin-google-analytics): Update `minimatch` (chore(gatsby-plugin-google-analytics): Update minimatch gatsbyjs/gatsby#37029)
086c862 fix(gatsby-core-utils): decode uri-encode filename for remote file (fix(gatsby-core-utils): decode uri-encode filename for remote file gatsbyjs/gatsby#35637)
ccf56d5 chore: Add npm "engines" (chore: Add npm "engines" gatsbyjs/gatsby#37046)
5772595 fix(gatsby-source-wordpress) pass store for auth (fix(gatsby-source-wordpress) pass store for auth gatsbyjs/gatsby#37006)
c411d69 chore(docs): Add `--` to quick start flags (chore(docs): Add -- to quick start flags gatsbyjs/gatsby#37041)
2a06fff chore(docs): Deployment Updates & Cleanup (chore(docs): Deployment Updates & Cleanup gatsbyjs/gatsby#37038)
0fb0390 chore: Repository Cleanup (chore: Repository Cleanup gatsbyjs/gatsby#37035)
88b9dc5 chore(gatsby-source-wordpress): remove runApisInSteps and call runApiSteps for each gatsby-node api (chore(gatsby-source-wordpress): remove runApisInSteps and call runApiSteps for each gatsby-node api gatsbyjs/gatsby#37039)
b69709c build: include e2e tests in renovate config (build: include e2e tests in renovate config gatsbyjs/gatsby#37005)
8fc95f5 chore(docs): Clarify language in v4 to v5 migration guide (chore(docs): Clarify language in v4 to v5 migration guide gatsbyjs/gatsby#37007)
1cfd9b8 chore(e2e-tests): Wait for route change on back/forward (chore(e2e-tests): Wait for route change on back/forward gatsbyjs/gatsby#37033)
4842417 chore(docs): Add IE 11 note to v2 to v3 migration guide (chore(docs): Add IE 11 note to v2 to v3 migration guide gatsbyjs/gatsby#37022)
19dd1c4 fix(graphiql-explorer): Adjust env var truthiness logic (fix(graphiql-explorer): Adjust env var truthiness logic gatsbyjs/gatsby#37032)
57b37ae chore(changelogs): update changelogs (chore(changelogs): update changelogs gatsbyjs/gatsby#37030)
58197a0 fix(docs): update forEach to use map (fix(docs): update forEach to use map gatsbyjs/gatsby#37008)
3a4d333 chore: migrate from express-graphql to graphql-http (chore: migrate from express-graphql to graphql-http gatsbyjs/gatsby#37001)
5766694 chore(docs): Add overview video to release notes (+ other misc) (chore(docs): Add overview video to release notes (+ other misc) gatsbyjs/gatsby#37003)

See the full diff

Package name: gatsby-plugin-sharp

The new version differs by 250 commits.

f3f1bbc chore(release): Publish
c410082 fix(gatsby-source-drupal): check relationships type exists on node before filtering (fix(gatsby-source-drupal): check relationships type exists on node before filtering gatsbyjs/gatsby#33181) (fix(gatsby-source-drupal): check relationships type exists on node before filtering (#33181) gatsbyjs/gatsby#33228)
f3f2834 fix(gatsby-source-wordpress): fix failing test docker setup (fix(gatsby-source-wordpress): fix failing test docker setup gatsbyjs/gatsby#33163)
fe2f09b feat(gatsby): let serve use getServerData headers (feat(gatsby): let serve use getServerData headers gatsbyjs/gatsby#33159)
fc66250 fix(gatsby): Assign parentSpan to activities that were missing them (fix(gatsby): Assign parentSpan to activities that were missing them gatsbyjs/gatsby#33122)
91187da feat(gatsby-source-drupal): Add tracing for full/delta fetches and http requests (feat(gatsby-source-drupal): Add tracing for full/delta fetches and http requests gatsbyjs/gatsby#33142)
d31645c chore(gatsby): add webpack file to export same version (chore(gatsby): add webpack file to export same version gatsbyjs/gatsby#33126)
44afaf5 fix(gatsby): fix hydration flicker on initial render of ssr page (fix(gatsby): fix hydration flicker on initial render of ssr page gatsbyjs/gatsby#33134)
f1141a0 docs: Fix broken link on Getting Started with MDX page (docs: Fix broken link on Getting Started with MDX page gatsbyjs/gatsby#33148)
f921277 chore(release): Publish next
b1168af chore(gatsby-plugin-gatsby-cloud): fix copy type file (chore(gatsby-plugin-gatsby-cloud): fix copy type file gatsbyjs/gatsby#33156)
14059da Remove <title> from inside <main> (Remove <title> from inside <main> gatsbyjs/gatsby#33150)
85645cd chore(release): Publish next
1720988 feat(gatsby-transformer-documentationjs): move createTypes to createSchemaCustomization (feat(gatsby-transformer-documentationjs): move createTypes to createSchemaCustomization gatsbyjs/gatsby#33149)
3d05986 feat(gatsby-plugin-styled-components): Add ability to disable vendor prefixes (feat(gatsby-plugin-styled-components): Add ability to disable vendor prefixes gatsbyjs/gatsby#33147)
323920d chore(gatsby): add environment variable for setting tracing config file (chore(gatsby): add environment variable for setting tracing config file gatsbyjs/gatsby#32513)
425b8f5 chore(release): Publish next
2f2880e fix(gatsby-source-drupal): handle edge case with deleting nodes (fix(gatsby-source-drupal): handle edge case with deleting nodes gatsbyjs/gatsby#33143)
eb552d1 chore(docs): Add note to Storybook guide about StaticImage (chore(docs): Add note to Storybook guide about StaticImage gatsbyjs/gatsby#33127)
4ff5026 docs: fix typo (Update index.mdx gatsbyjs/gatsby#33137)
81f35ff docs(gatsby-plugin-gatsby-cloud): fix typo: asterix -> asterisk (Fix typo: asterix -> asterisk gatsbyjs/gatsby#33135)
4837b72 feat(gatsby-plugin-page-creator): Fix gatsby plugin page creator v4 (feat(gatsby-plugin-page-creator): Fix gatsby plugin page creator v4 gatsbyjs/gatsby#33120)
3401149 feat(gatsby): Deprecate schema-related APIs in sourceNodes (fix(gatsby): Deprecate schema-related APIs in sourceNodes gatsbyjs/gatsby#32291)
62683f5 fix(gatsby-plugin-gatsby-cloud): Emit CREATE_FILE_NODE in onPostBootstrap (fix(gatsby-plugin-gatsby-cloud): Emit CREATE_FILE_NODE in onPostBootstrap gatsbyjs/gatsby#33136)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution


          fix: examples/using-remark-copy-linked-files/package.json to reduce v…

6185cb0

…ulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-GOT-2932019
- https://snyk.io/vuln/SNYK-JS-HTTPCACHESEMANTICS-3248783
- https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2330875
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2331908
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430337

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet