[Snyk] Upgrade puppeteer from 5.4.1 to 15.5.0 #5

snyk-bot · 2022-08-20T19:25:37Z

Snyk has created this PR to upgrade puppeteer from 5.4.1 to 15.5.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 58 versions ahead of your current version.
The recommended version was released a month ago, on 2022-07-21.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Arbitrary File Write SNYK-JS-TAR-1579155	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	425/1000 Why? CVSS 8.5	No Known Exploit
Information Exposure SNYK-JS-SIMPLEGET-2361683	425/1000 Why? CVSS 8.5	Proof of Concept
Information Exposure SNYK-JS-SIMPLEGET-2361683	425/1000 Why? CVSS 8.5	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	425/1000 Why? CVSS 8.5	Proof of Concept
Directory Traversal SNYK-JS-MOMENT-2440688	425/1000 Why? CVSS 8.5	No Known Exploit
Command Injection SNYK-JS-LODASH-1040724	425/1000 Why? CVSS 8.5	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	425/1000 Why? CVSS 8.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-JPEGJS-2859218	425/1000 Why? CVSS 8.5	Proof of Concept
Prototype Pollution SNYK-JS-INI-1048974	425/1000 Why? CVSS 8.5	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-EJS-2803307	425/1000 Why? CVSS 8.5	Proof of Concept
Prototype Pollution SNYK-JS-CACHEDPATHRELATIVE-2342653	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	425/1000 Why? CVSS 8.5	Proof of Concept
Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	425/1000 Why? CVSS 8.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	425/1000 Why? CVSS 8.5	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1243891	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1085627	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	425/1000 Why? CVSS 8.5	Proof of Concept
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary Code Injection SNYK-JS-EJS-1049328	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	425/1000 Why? CVSS 8.5	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-STRIPTAGS-1312310	425/1000 Why? CVSS 8.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: puppeteer

15.5.0 - 2022-07-21
15.5.0 (2022-07-21)

Features
- chromium: roll to Chromium 105.0.5173.0 (r1022525) (#8682) (f1b8ad3)
15.4.2 - 2022-07-21
15.4.2 (2022-07-21)

Bug Fixes
- taking a screenshot with null viewport should be possible (#8680) (2abb9f0), closes #8673
15.4.1 - 2022-07-21
15.4.1 (2022-07-21)

Bug Fixes
- import URL (#8670) (34ab5ca)
15.4.0 - 2022-07-13
15.4.0 (2022-07-13)

Features
- expose the page getter on Frame (#8657) (af08c5c)
Bug Fixes
- ignore *.tsbuildinfo (#8662) (edcdf21)
15.3.2 - 2022-07-08
15.3.2 (2022-07-08)

Bug Fixes
- cache dynamic imports (#8652) (1de0383)
- expose a RemoteObject getter (#8642) (d0c4291), closes #8639
- page: fix page.#scrollIntoViewIfNeeded method (#8631) (b47f066)
15.3.1 - 2022-07-06
15.3.1 (2022-07-06)

Bug Fixes
- extends ElementHandle to Nodes (#8552) (5ff205d)
15.3.0 - 2022-07-01
15.3.0 (2022-07-01)

Features
- add documentation (#8593) (066f440)
Bug Fixes
- remove unused imports (#8613) (0cf4832)
15.2.0 - 2022-06-29
15.2.0 (2022-06-29)

Features
- add fromSurface option to page.screenshot (#8496) (79e1198)
- export public types only (#8584) (7001322)
Bug Fixes
- clean up tmp profile dirs when browser is closed (#8580) (9787a1d)
15.1.1 - 2022-06-25
15.1.1 (2022-06-25)

Bug Fixes
- export ElementHandle (e0198a7)
15.1.0 - 2022-06-24
15.1.0 (2022-06-24)

Features
- chromium: roll to Chromium 104.0.5109.0 (r1011831) (#8569) (fb7d31e)
15.0.2 - 2022-06-24
15.0.1 - 2022-06-24
15.0.0 - 2022-06-23
14.4.1 - 2022-06-17
14.4.0 - 2022-06-13
14.3.0 - 2022-06-07
14.2.1 - 2022-06-02
14.2.0 - 2022-06-01
14.1.2 - 2022-05-30
14.1.1 - 2022-05-19
14.1.0 - 2022-05-13
14.0.0 - 2022-05-09
13.7.0 - 2022-04-28
13.6.0 - 2022-04-20
13.5.2 - 2022-03-31
13.5.1 - 2022-03-09
13.5.0 - 2022-03-07
13.4.1 - 2022-03-01
13.4.0 - 2022-02-22
13.3.2 - 2022-02-14
13.3.1 - 2022-02-10
13.3.0 - 2022-02-09
13.2.0 - 2022-02-07
13.1.3 - 2022-01-31
13.1.2 - 2022-01-25
13.1.1 - 2022-01-18
13.1.0 - 2022-01-17
13.0.1 - 2021-12-22
13.0.0 - 2021-12-10
12.0.1 - 2021-11-29
12.0.0 - 2021-11-27
11.0.0 - 2021-11-03
10.4.0 - 2021-09-21
10.2.0 - 2021-08-04
10.1.0 - 2021-06-29
10.0.0 - 2021-05-31
9.1.1 - 2021-05-05
9.1.0 - 2021-05-03
9.0.0 - 2021-04-21
8.0.0 - 2021-02-26
7.1.0 - 2021-02-12
7.0.4 - 2021-02-09
7.0.3 - 2021-02-09
7.0.2 - 2021-02-09
7.0.1 - 2021-02-04
7.0.0 - 2021-02-03
6.0.0 - 2021-02-02
5.5.0 - 2020-11-16
15.5.0 (2022-07-21)

Features
- chromium: roll to Chromium 105.0.5173.0 (r1022525) (#8682) (f1b8ad3)
5.4.1 - 2020-10-27
15.4.1 (2022-07-21)

Bug Fixes
- import URL (#8670) (34ab5ca)

from puppeteer GitHub release notes

Commit messages

Package name: puppeteer

a654607 chore(main): release 15.5.0 (#8683)
f1b8ad3 feat(chromium): roll to Chromium 105.0.5173.0 (r1022525) (#8682)
a43965a chore(main): release 15.4.2 (#8681)
2abb9f0 fix: taking a screenshot with null viewport should be possible (#8680)
3d780a3 chore: fix ToT test jobs (#8679)
d734c14 chore(main): release 15.4.1 (#8678)
34ab5ca fix: import URL (#8670)
c801ce1 chore: try to fix the docusaurus build by giving Node more old mem space (#8675)
0180a88 docs: add gitlab-ci section to troubleshooting (#8664)
f0c2808 chore(main): release 15.4.0 (#8668)
edcdf21 fix: ignore *.tsbuildinfo (#8662)
af08c5c feat: expose the page getter on Frame (#8657)
dd27559 chore(main): release 15.3.2 (#8647)
b47f066 fix(page): fix page.#scrollIntoViewIfNeeded method (#8631)
1de0383 fix: cache dynamic imports (#8652)
d0c4291 fix: expose a RemoteObject getter (#8642)
f82c036 chore: link new puppeteer versions (#8637)
ec8c750 chore(main): release 15.3.1 (#8635)
4cd97e9 chore: format on pre-release (#8634)
5ff205d fix: extends `ElementHandle` to `Node`s (#8552)
b49d530 chore: `continue-on-error` for non-Linux tests (#8632)
b5a345b chore: format docs (#8629)
9e596d0 chore: format code (#8628)
28e236f chore: use --parallel (#8612)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade puppeteer from 5.4.1 to 15.5.0. See this package in npm: https://www.npmjs.com/package/puppeteer See this project in Snyk: https://app.snyk.io/org/marcelraschke/project/5270de6d-8ae8-47d8-ac42-6a1705a7a891?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade puppeteer from 5.4.1 to 15.5.0 #5

[Snyk] Upgrade puppeteer from 5.4.1 to 15.5.0 #5

snyk-bot commented Aug 20, 2022

15.5.0 (2022-07-21)

Features

15.4.2 (2022-07-21)

Bug Fixes

15.4.1 (2022-07-21)

Bug Fixes

15.4.0 (2022-07-13)

Features

Bug Fixes

15.3.2 (2022-07-08)

Bug Fixes

15.3.1 (2022-07-06)

Bug Fixes

15.3.0 (2022-07-01)

Features

Bug Fixes

15.2.0 (2022-06-29)

Features

Bug Fixes

15.1.1 (2022-06-25)

Bug Fixes

15.1.0 (2022-06-24)

Features

15.5.0 (2022-07-21)

Features

15.4.1 (2022-07-21)

Bug Fixes

[Snyk] Upgrade puppeteer from 5.4.1 to 15.5.0 #5

Are you sure you want to change the base?

[Snyk] Upgrade puppeteer from 5.4.1 to 15.5.0 #5

Conversation

snyk-bot commented Aug 20, 2022

Snyk has created this PR to upgrade puppeteer from 5.4.1 to 15.5.0.

15.5.0 (2022-07-21)

Features

15.4.2 (2022-07-21)

Bug Fixes

15.4.1 (2022-07-21)

Bug Fixes

15.4.0 (2022-07-13)

Features

Bug Fixes

15.3.2 (2022-07-08)

Bug Fixes

15.3.1 (2022-07-06)

Bug Fixes

15.3.0 (2022-07-01)

Features

Bug Fixes

15.2.0 (2022-06-29)

Features

Bug Fixes

15.1.1 (2022-06-25)

Bug Fixes

15.1.0 (2022-06-24)

Features

15.5.0 (2022-07-21)

Features

15.4.1 (2022-07-21)

Bug Fixes