Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Security upgrade jointjs from 2.2.1 to 3.3.0 #127

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade jointjs from 2.2.1 to 3.3.0 #127

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 758/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3		 Prototype Pollution
SNYK-JS-JOINTJS-1024444		 Yes Proof of Concept
medium severity 581/1000
Why? Recently disclosed, Has a fix available, CVSS 5.9		 Denial of Service (DoS)
SNYK-JS-JOINTJS-1062038		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: jointjs The new version differs by 221 commits.
  • fed63b3 Release v3.3.0
  • bd30bf8 linkTools.Arrowhead: prevent other linkTools from being displayed after mouseleave (#1410)
  • 190feb1 attributes.textWrap: take letter-spacing into account (#1409)
  • 684a4d7 dia.CellView: findBySelector() docs
  • b95acc4 dia.CellView: findPortNode() docs
  • db022f4 Docs: Paper.getArea() (#1405)
  • 690970a demo.ts-demo: add class style shape definition (#1403)
  • ec7ab01 util.unsetByPath(): prevent prototype modification (#1406)
  • 9a51109 Docs: fix Element.ports (#1371)
  • 42d7f86 connectors.jumpover: request updates after batch:stop; dia.Graph: fix hasActiveBatch() (#1393)
  • 7a64944 Add Container Demo (#1395)
  • 53a286f dia.Element: insertPort() docs + ts (#1396)
  • ba77b80 dia.Element: add insertPort() to support inserting port at position
  • 737c481 util.setByPath(): prevent prototype pollution (#1390)
  • 21cc6c6 highlighters.mask: text highlight uses rect (#1387)
  • fa6a6ed util.breakText: fix height for a text with empty lines (#1386)
  • 3cc248f dia.CellView: fix update order of nodes when 'ref' in use
  • 568c5eb dia.Paper: options.restrictTranslate defined as function => function (#883)
  • 6d7079e Update dependencies
  • a4f3112 Add CDATASection to eslint globals
  • 8f16852 Vectorizer: add createSVGStyle() and createCDATASection() static methods (#1379)
  • 5be90ff Add test for typescript
  • 63a7ca5 dia.HighlighterView: fix TS definitions
  • 9e1da68 dia.HighlighterView: fix update for highlighters with the layer optio… (#1374)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@snyk-bot