[Snyk] Security upgrade react-native from 0.26.0 to 0.63.0 - #70

Open

snyk-bot wants to merge 1 commit into

snyk-fix-5d41c748a27888d73240adb17f570d98

snyk-bot commented Jul 9, 2020

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Arbitrary Code Injection SNYK-JS-MORGAN-72579	No	Proof of Concept
	Uninitialized Memory Exposure npm:base64-url:20180512	No	Mature
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:fresh:20170908	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:mime:20170907	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:negotiator:20160616	No	No Known Exploit
	Prototype Override Protection Bypass npm:qs:20170213	No	No Known Exploit

Check the changes in this PR to ensure they won't cause issues with your project.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

fix: package.json to reduce vulnerabilities

8460c6a

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MORGAN-72579
- https://snyk.io/vuln/npm:base64-url:20180512
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/npm:fresh:20170908
- https://snyk.io/vuln/npm:mime:20170907
- https://snyk.io/vuln/npm:ms:20170412
- https://snyk.io/vuln/npm:negotiator:20160616
- https://snyk.io/vuln/npm:qs:20170213

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment