Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk Alert] Fix for 1 vulnerable dependency path #1

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

The following newly disclosed vulnerabilities impact one or more of the npm packages this project uses:

As these vulnerabilities are now publicly known, attackers can try to use them against your application, making fixing them a matter of urgency.

To help expedite the fix, Snyk created this pull request with the necessary changes to address the vulnerabilities.

This pull request includes:

  • package.json scripts and a Snyk policy (.snyk) file, which patch the vulnerabilities that can't be upgraded away.

You can read more about Snyk's upgrade and patch logic in Snyk's documentation. Each vulnerability advisory includes information about the vulnerable versions, and direct links to the available patches.

Note that this pull request only addresses the newly disclosed vulnerabilities mentioned above.

See the Snyk test report to review and remediate the full list of vulnerable dependencies.

Please check the changes in this PR to ensure they won't cause issues with your application.

Stay secure,

The Snyk team

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant