Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 1 vulnerabilities #32

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 1 vulnerabilities #32

wants to merge 1 commit into from

Conversation

ajesse11x
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: css-loader The new version differs by 207 commits.
  • 634ab49 chore(release): 2.0.0
  • 6ade2d0 refactor: remove unused file (#860)
  • e7525c9 test: nested url (#859)
  • 7259faa test: css hacks (#858)
  • 5e6034c feat: allow to filter import at-rules (#857)
  • 5e702e7 feat: allow filtering urls (#856)
  • 9642aa5 test: css stuff (#855)
  • 3338656 fix: reduce number of require for url (#854)
  • 533abbe test: issue 636 (#853)
  • 08c551c refactor: better warning on invalid url resolution (#852)
  • b0aa159 test: issue #589 (#851)
  • f599c70 fix: broken unucode characters (#850)
  • 1e551f3 test: issue 286 (#849)
  • 419d27b docs: improve readme (#848)
  • d94a698 refactor: webpack-default (#847)
  • b97d997 feat: schema options
  • 453248f fix: support module resolution in composes (#845)
  • 8a6ea10 refactor: postcss plugins (#844)
  • fdcf687 fix: url resolving logic (#843)
  • 889dc7f feat: allow to disable css modules and disable their by default (#842)
  • ee2d253 test: importLoaders option (#841)
  • 1dad1fb feat: reuse postcss ast from other loaders (i.e `postcss-loader`) (#840)
  • fe94ebc test: icss reserved keywords (#839)
  • 9eaba66 refactor: migrate on message api for postcss-icss-plugin (#838)

See the full diff

Package name: postcss-loader The new version differs by 250 commits.
  • 7647ac9 chore(release): 3.0.0
  • 313c3c4 docs(README): update filename formatting
  • d6931da refactor(Error): add `error` property checks
  • 962b1d6 refactor(options): remove `ident` from validation schema
  • 1f98aee refactor(Warning): add `warning` property checks
  • 95de4c1 docs(LOADER): update JSDoc
  • ea68a42 chore(package): update `schema-utils` v0.4.5...1.0.0 (`dependencies`)
  • 73a8c66 chore(ISSUE_TEMPLATE/DOCS): add template for documentation issues
  • 70f4426 chore(ISSUE_TEMPLATE/FEATURE): add feature request template
  • 4a0328e chore(ISSUE_TEMPLATE/BUG): move bug reports into their own template
  • 319d1f7 chore(PULL_REQUEST_TEMPLATE): improve format and content
  • bdcbef0 refactor(src): update code base with latest ES2015+ features
  • f34954f fix(index): add ast version (`meta.ast`)
  • 8ac6fb5 fix(index): emit `warnings` as an instance of `{Error}`
  • 2c6033b test(Errors): remove stacktrace from snapshot
  • 549ea08 fix(options): improved `ValidationError` messages
  • fbf05de test: replace helpers with `@ webpack-utilities/test` (#386)
  • daa0da8 chore(package): update `postcss` v6.0.0...7.0.0 (`dependencies`) (#375)
  • 114db12 docs(README): add autoprefixing example (#380)
  • 8772814 style(standard): fix linting issues
  • 8ef443f ci(travis): build stages
  • 6f10898 ci(appveyor): readd Appveyor CI (#381)
  • 0bb835c ci(package): run tests in an explicit environment (`jest --env=node`) (#382)
  • 5e2bca9 docs(README): replace `postcss-cssnext` with `postcss-preset-env` (#379)

See the full diff

Package name: webpack-dev-server The new version differs by 250 commits.
  • c9271b9 chore(release): 4.0.0
  • 18bf369 test: fix stability (#3676)
  • cdcabb2 fix: respect protocol from browser for manual setup (#3675)
  • 1768d6b fix: initial reloading for lazy compilation (#3662)
  • 4f5bab1 docs: improve examples (#3672)
  • f2d87fb fix: improve https CLI output (#3673)
  • 0277c5e chore: remove redundant console statements (#3671)
  • 16fcdbc docs: add `ipc` example (#3667)
  • 8915fb8 test: add e2e tests for built in routes (#3669)
  • 4d1cbe1 docs: ask `version` information in issue template (#3668)
  • b6c1881 chore(deps-dev): bump core-js from 3.16.1 to 3.16.2 (#3666)
  • ffa8cc5 chore(deps-dev): bump supertest from 6.1.5 to 6.1.6 (#3665)
  • f1fdaa7 chore(release): 4.0.0-rc.1
  • c4678bc fix: legacy API (#3660)
  • d8bdd03 test: fix stability (#3661)
  • 22b1414 refactor: remove `killable` (#3657)
  • 75bafbf test: add e2e tests for module federation (#3658)
  • 493ccbd chore(deps): update `ws` (#3652)
  • ae8c523 test: add e2e test for universal compiler (#3656)
  • f94b84f chore(deps): update (#3655)
  • 1923132 test: fix cli
  • 2adfd01 test: fix todo (#3653)
  • 6e2cbde fix: proxy logging and allow to pass options without the `target` option (#3651)
  • c9ccc96 fix: respect infastructureLogging.level for client.logging (#3613)

See the full diff

Package name: xo The new version differs by 250 commits.
  • aa8508b 0.31.0
  • 32d96c3 Upgrade dependencies
  • 1240dd2 Enable `import/no-anonymous-default-export` and `import/no-named-default` (#472)
  • 6a05691 Add support for scoped shareable configs (#480)
  • ca21492 Add some eslint-plugin-node rules
  • bdc13e2 Fix Travis
  • c7d64de 0.30.0
  • ca31f1c Upgrade dependencies
  • 07e2762 Prevent extraneous newline from `--stdin --fix` (#460)
  • a592d3d 0.29.1
  • 4783f26 Add `tap-snapshots/*.cjs` to default ignore list (#461)
  • 967927d Temporarily disable the `unicorn/string-content` rule (#462)
  • 87e3615 0.29.0
  • f59ec7b Update dependencies
  • e05efc3 Upgrade to Prettier 2.0.4 (#458)
  • f20f6d2 Allow `nodeVersion` in XO config to override `engines.node` (#457)
  • ec87ef3 0.28.3
  • c47a0c6 Support `semicolon` option with TypeScript (#446)
  • a4625a7 Add TS extends after base XO extends and before user extends (#453)
  • 5da0bbc 0.28.2
  • 41b1bd7 Set `indent` rule for TS files too (#451)
  • 28902f0 Fix compatibility with latest TypeScript-ESLint version (#452)
  • 2e39794 0.28.1
  • 6c57ff7 Add `xo-typescript` and `prettier/@ typescript-eslint` before user extends (#442)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@snyk-bot
fix: package.json to reduce vulnerabilities
14c87c8 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@ajesse11x @snyk-bot