[Snyk] Security upgrade gulp-coffee from 2.3.5 to 3.0.3 #14
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MERGE-1040469
|
Insecure Use of Regular Expressions (68)More info on how to fix Insecure Use of Regular Expressions in Javascript. Insecure File Management (11)flight-manual.atom.io/gulpfile.js Line 86 in a01fba6 flight-manual.atom.io/gulpfile.js Line 89 in a01fba6 flight-manual.atom.io/gulpfile.js Line 93 in a01fba6 flight-manual.atom.io/gulpfile.js Line 96 in a01fba6 flight-manual.atom.io/gulpfile.js Line 100 in a01fba6 flight-manual.atom.io/gulpfile.js Line 125 in a01fba6 flight-manual.atom.io/gulpfile.js Line 136 in a01fba6 More info on how to fix Insecure File Management in Javascript. Insecure Use of Dangerous Function (4)flight-manual.atom.io/gulpfile.js Line 108 in a01fba6 flight-manual.atom.io/Rakefile Line 98 in a01fba6 More info on how to fix Insecure Use of Dangerous Function in Javascript and Ruby. Vulnerable Libraries (32)
More info on how to fix Vulnerable Libraries in Javascript and Ruby. 👉 Go to the dashboard for detailed results. 📥 Happy? Share your feedback with us. |
delete-merged-branch
bot
deleted the
snyk-fix-d1098ea76b97111d3090005a7de26faa
branch
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-MERGE-1040469
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gulp-coffee
The new version differs by 19 commits.See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic