Skip to content

[Snyk] Fix for 25 vulnerabilities - #126

Open
adamlaska wants to merge 1 commit into
masterfrom
snyk-fix-e94834b424e0015979e60767d00fb937
Open

[Snyk] Fix for 25 vulnerabilities#126
adamlaska wants to merge 1 commit into
masterfrom
snyk-fix-e94834b424e0015979e60767d00fb937

Conversation

@adamlaska

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 25 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

IssueScore
high severityPrototype Pollution
SNYK-JS-LODASH-567746
731
high severityArbitrary Code Execution
SNYK-JS-HANDLEBARS-534478
726
critical severityPrototype Pollution
SNYK-JS-HANDLEBARS-534988
704
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
696
high severityPrototype Pollution
SNYK-JS-LODASH-6139239
696
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-PRISMJS-1076581
696
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-PRISMJS-1585202
696
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
696
high severityPrototype Pollution
SNYK-JS-LODASH-608086
686
high severityCode Injection
SNYK-JS-LODASH-1040724
681
high severityRemote Code Execution (RCE)
SNYK-JS-HANDLEBARS-1056767
671
medium severityPrototype Pollution
SNYK-JS-HANDLEBARS-567742
646
medium severityMissing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
631
high severityCross-site Scripting (XSS)
SNYK-JS-PRISMJS-597628
629
medium severityPrototype Pollution
SNYK-JS-HANDLEBARS-1279029
601
medium severityPrototype Pollution
SNYK-JS-MINIMIST-559764
601
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-BROWSERSLIST-1090194
586
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
586
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595
586
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640
586
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-PRISMJS-1314893
584
low severityPrototype Pollution
SNYK-JS-MINIMIST-2429795
506
low severityRegular Expression Denial of Service (ReDoS)
npm:debug:20170905
506
medium severityCross-site Scripting (XSS)
SNYK-JS-PRISMJS-2404333
484
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818
479

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Remote Code Execution (RCE)
🦉 Prototype Pollution
🦉 More lessons are available in Snyk Learn

@google-cla

google-claBot commented Sep 5, 2024

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@socket-security

Copy link
Copy Markdown

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

PackageNew capabilitiesTransitivesSizePublisher
npm/anymatch@3.1.3None09.65 kBphated
npm/autoprefixer@10.2.6environment0224 kBai
npm/braces@3.0.3None044.6 kBjonschlinkert
npm/browserslist@4.23.3environment, filesystem063 kBai
npm/caniuse-lite@1.0.30001657None02.1 MBai, beneb, caniuse-lite
npm/cheerio-select@2.1.0None+2353 kBfeedic
npm/chokidar@3.6.0environment, filesystem090.2 kBpaulmillr
npm/colorette@1.4.0environment011.3 kBjorgebucaran
npm/commander@6.2.1filesystem, shell0113 kBabetomo
npm/electron-to-chromium@1.5.14None0146 kBkilianvalkhof
npm/encoding-sniffer@0.2.0None+1516 kBfeedic
npm/escalade@3.2.0None012.4 kBlukeed
npm/fill-range@7.1.1None016.7 kBjonschlinkert
npm/fraction.js@4.3.7None086.2 kBinfusion
npm/fsevents@2.3.3None0173 kBpipobscure
npm/glob-parent@5.1.2None012.1 kBphated
npm/gray-matter@4.0.3eval, filesystem038.6 kBrmassaioli
npm/handlebars@4.7.8filesystem02.78 MBjaylinski
npm/jstransformer-handlebars@1.2.0None04.48 kBwebketje
npm/lodash.clonedeepwith@4.5.0None048.5 kBjdalton
npm/lodash.groupby@4.6.0None067.7 kBjdalton
npm/metalsmith-prism@4.2.0None09.71 kBwernerglinka
npm/metalsmith-yearly-pagination@4.0.1None08.92 kBflipp
npm/metalsmith@2.4.0None+297.7 kBwebketje
npm/micromatch@4.0.8None056.6 kBdoowb
npm/minimist@1.2.8None054.5 kBljharb
npm/neo-async@2.6.2None0298 kBsuguru03
npm/node-releases@2.0.18None035.7 kBchicoxyzzy
npm/parse5-htmlparser2-tree-adapter@7.0.0None+2106 kBfeedic
npm/parse5-parser-stream@7.1.2None+21.13 MBfeedic
npm/picocolors@1.1.0environment011.4 kBalexeyraspopov
npm/picomatch@2.3.1None090 kBmrmlnc
npm/postcss-value-parser@4.2.0None027.2 kBevilebottnawi
npm/postcss@7.0.39environment, filesystem+1547 kBai
npm/prismjs@1.29.0None02.05 MBrundevelopment
npm/readdirp@3.6.0filesystem020.5 kBpaulmillr
npm/section-matter@1.0.0None012.1 kBjonschlinkert
npm/stat-mode@1.0.0None025.7 kBtootallnate
npm/strip-bom-string@1.0.0None05.69 kBjonschlinkert
npm/style-search@0.1.0None022.3 kBdavidtheclark
npm/stylelint-config-recommended-scss@4.0.0None05.93 kBkristerkari
npm/stylelint-config-recommended@3.0.0None06.51 kBjeddy3
npm/stylelint-config-standard@19.0.0None025.7 kBjeddy3
npm/stylelint-config-twbs-bootstrap@0.9.0None011.3 kBxhmikosr
npm/stylelint-order@3.1.1None075.8 kBhudochenkov
npm/stylelint-scss@3.12.0None+1620 kBkristerkari
npm/stylelint@11.1.1environment, filesystem+11.68 MBhudochenkov
npm/substitute@https://github.com/segmentio/substitute/archive/0.1.0.tar.gzNone00 B
npm/sugarss@2.0.0None0112 kBai
npm/supports-color@5.5.0environment06.63 kBsindresorhus
npm/svg-tags@1.0.0None05.93 kBkgryte
npm/table@5.4.6None0198 kBgajus
npm/tap-parser@0.4.3None030.5 kBsubstack
npm/tape@4.11.0environment, filesystem0144 kBljharb
npm/tar@2.2.2filesystem01.3 MBisaacs
npm/term-size@1.2.0environment030.9 kBsindresorhus
npm/text-table@0.2.0None011 kBsubstack
npm/through@2.3.8None012.5 kBdominictarr
npm/through2@0.6.5Transitive: environment+164.2 kBbryce
npm/thunkify-wrap@1.0.4None011.1 kBdead_horse
npm/thunkify@2.1.2None04.28 kBtjholowaychuk
npm/tmp@0.0.33filesystem026 kBraszi
npm/to-fast-properties@2.0.0None03.5 kBsindresorhus
npm/to-object-path@0.3.0None05.07 kBjonschlinkert
npm/to-readable-stream@1.0.0None02.79 kBsindresorhus
npm/to-regex-range@5.0.1None022.9 kBjonschlinkert
npm/to-regex@3.0.2None012.6 kBjonschlinkert
npm/to-vfile@6.0.0filesystem09.92 kBwooorm
npm/toidentifier@1.0.0None04.33 kBdougwilson
npm/trim-newlines@2.0.0None02.97 kBsindresorhus
npm/trim-trailing-lines@1.1.2None04.65 kBwooorm
npm/trim@0.0.1None02.71 kBtjholowaychuk
npm/trough@1.0.4None013 kBwooorm
npm/true-case-path@1.0.3None015.7 kBbarsh
npm/tslib@1.10.0None038.1 kBtypescript
npm/type-check@0.3.2None020.9 kBgkz
npm/type-detect@4.0.8None042.1 kBchaijs
npm/type-fest@0.3.1None023 kBsindresorhus
npm/typedarray@0.0.6None026 kBsubstack
npm/uglify-js@3.6.5eval, filesystem Transitive: shell+1820 kBalexlamsl
npm/undici@6.19.8environment, network01.13 MBmatteo.collina
npm/unherit@1.1.2None05.43 kBwooorm
npm/unified-args@7.1.0None034.9 kBwooorm
npm/unified-engine@7.0.0filesystem, unsafe+380 kBwooorm
npm/unified-lint-rule@1.0.4None05.65 kBwooorm
npm/unified-message-control@1.0.4None015.1 kBwooorm
npm/unified@7.1.0None055 kBwooorm
npm/union-value@1.0.1None06.83 kBdoowb
npm/uniq@1.0.1None04.32 kBmikolalysenko
npm/unique-string@1.0.0None02.58 kBsindresorhus
npm/unist-util-find-all-after@1.0.4None012.5 kBwooorm
npm/unist-util-generated@1.1.4None06.28 kBwooorm
npm/unist-util-inspect@4.1.4None09.85 kBwooorm
npm/unist-util-is@3.0.0None011.1 kBwooorm
npm/unist-util-position@3.0.3None06.26 kBwooorm
npm/unist-util-remove-position@1.1.3None06.55 kBwooorm
npm/unist-util-stringify-position@1.1.2None06.55 kBwooorm
npm/unist-util-visit-parents@2.1.2None011.6 kBwooorm
npm/unist-util-visit@1.4.1None06.87 kBwooorm
npm/unpipe@1.0.0None04.31 kBdougwilson
npm/unset-value@1.0.0None+220.7 kBjonschlinkert
npm/untildify@2.1.0None02.71 kBsindresorhus
npm/unyield@0.0.1None02.62 kBmattmueller
npm/update-browserslist-db@1.1.0environment, filesystem, shell014.8 kBai
npm/update-notifier@3.0.1environment, shell014.7 kBsboudrias
npm/uri-js@4.2.2None0533 kBgarycourt
npm/urix@0.1.0None04.37 kBlydell
npm/url-parse-lax@3.0.0None04.23 kBsindresorhus
npm/use@3.1.1None09.51 kBjonschlinkert
npm/util-deprecate@1.0.2None05.48 kBtootallnate
npm/uuid@3.3.3None034.7 kBbroofa
npm/v8-compile-cache@2.1.0environment, filesystem, unsafe016.2 kBzertosh
npm/validate-npm-package-license@3.0.4None016.6 kBkemitchell
npm/vfile-location@2.0.5None07.54 kBwooorm
npm/vfile-message@1.1.1None09.03 kBwooorm
npm/vfile-reporter@6.0.0None+372.9 kBwooorm
npm/vfile-sort@2.2.1None05.93 kBwooorm
npm/vfile-statistics@1.1.3None06.76 kBwooorm
npm/vfile@3.0.1unsafe+123.6 kBwooorm
npm/vnu-jar@19.9.4None028.9 MBsideshowbarker
npm/ware@1.3.0None06.17 kBianstormtaylor
npm/whatwg-encoding@3.1.1None013.3 kBdomenic
npm/whatwg-mimetype@4.0.0None016.7 kBdomenic
npm/which-module@1.0.0None04.16 kBnexdrew
npm/which@1.3.1environment09.42 kBisaacs
npm/wide-align@1.1.3None+17.49 kBiarna
npm/widest-line@2.0.1None03.16 kBsindresorhus
npm/wrap-ansi@2.1.0None+111.8 kBsindresorhus
npm/wrap-fn@0.1.5None05.27 kBmattmueller
npm/wrapped@1.0.1None05.03 kBmattmueller
npm/wrappy@1.0.2None02.96 kBzkat
npm/write-file-atomic@2.4.3None012.2 kBisaacs
npm/write@1.0.3filesystem014.7 kBjonschlinkert
npm/x-is-string@0.1.0None04.67 kBmattesch
npm/xdg-basedir@3.0.0environment04.08 kBsindresorhus
npm/xml@1.0.1None023.4 kBdylang
npm/xtend@4.0.2None06.46 kBraynos
npm/y18n@3.2.1filesystem08.75 kBbcoe
npm/yallist@2.1.2None013.6 kBisaacs
npm/yaml-js@0.0.8filesystem0498 kBconnec
npm/yargs-parser@10.1.0environment048.4 kBbcoe
npm/yargs@13.3.0environment, filesystem+1243 kBbcoe

🚮 Removed packages:npm/absolute@0.0.1), npm/agent-base@4.2.1), npm/ajv@5.5.2), npm/ansi-red@0.1.1), npm/ansi-wrap@0.1.0), npm/anymatch@3.1.1), npm/async@1.0.0), npm/autoprefixer@9.7.1), npm/bluebird@3.5.2), npm/braces@3.0.2), npm/browserslist@4.7.2), npm/caniuse-lite@1.0.30001008), npm/chokidar@3.3.0), npm/clipboard@2.0.4), npm/co@4.6.0), npm/coffee-script@1.12.7), npm/colors@1.0.3), npm/combined-stream@1.0.7), npm/commander@2.20.0), npm/cycle@1.0.3), npm/debug@3.2.5), npm/delegate@3.2.0), npm/electron-to-chromium@1.3.302), npm/es6-promise@4.2.5), npm/eyes@0.1.8), npm/fast-deep-equal@1.1.0), npm/fill-range@7.0.1), npm/form-data@2.3.2), npm/fsevents@2.1.1), npm/glob-parent@5.1.0), npm/good-listener@1.2.2), npm/gray-matter@2.1.1), npm/handlebars@4.5.1), npm/har-validator@5.1.0), npm/has-generators@1.0.1), npm/https-proxy-agent@2.2.1), npm/is@3.3.0), npm/json-schema-traverse@0.3.1), npm/jstransformer-handlebars@1.1.0), npm/lodash@4.17.14), npm/metalsmith-prism@3.1.1), npm/metalsmith-yearly-pagination@4.0.0), npm/metalsmith@2.3.0), npm/micromatch@4.0.2), npm/mime-db@1.36.0), npm/mime-types@2.1.20), npm/minimist@0.0.10), npm/neo-async@2.6.1), npm/node-github-graphql@0.2.7), npm/node-releases@1.1.39), npm/optimist@0.6.1), npm/picomatch@2.0.7), npm/postcss-value-parser@4.0.2), npm/postcss@7.0.21), npm/prismjs@1.17.1), npm/psl@1.1.29), npm/readdirp@3.2.0), npm/recursive-readdir@2.2.2), npm/select@1.1.2), npm/sshpk@1.14.2), npm/stack-trace@0.0.10), npm/stat-mode@0.2.2), npm/uglify-js@3.3.28), npm/uuid@3.3.2), npm/winston@2.4.4)

View full report↗︎

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@adamlaska@snyk-bot