Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #83

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

matrunchyk
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: danger The new version differs by 229 commits.
  • 54f7f7a Release 11.2.1
  • d7cd274 Try wrap up PR
  • 042c4fa Merge branch 'main' of https://github.com/danger/danger-js
  • 0f48d32 Merge pull request #1342 from pepix/support-arm64-target
  • 64d9833 Merge pull request #1345 from connyay/cjh-bump-jwt
  • dea9c6c Upgrade jsonwebtoken and @ types/jsonwebtoken
  • 40bdfe1 Add a new workflow to build binaries for macOS architectres on GitHub Actions
  • 4efada7 Update release-it.json and create-homebrew-tap-pr.sh
  • 16271cd Support arm64 binary generation
  • ad3c542 Release 11.2.0
  • 6829c33 CHANGELOG for release
  • c3641dc Merge pull request #1331 from hcomde/issue_1138_gitlab_threads
  • f8453e9 Merge pull request #1337 from stodirascu/fix-github-action
  • beb7f41 Moving the GITHUB_WORKFLOW check before actually getting the userInfo
  • 90f595b GitLab: Add support to use threads instead of comments
  • 639898f Merge pull request #1336 from falkenhawk/patch-1
  • 7b60e62 fix messing the order of messages
  • 0c8804f Merge pull request #1332 from ivankatliarchuk/issue_1330
  • 886616b use this.log instead
  • 98fd3f0 update message
  • c4d1cbf wip
  • 3a97856 update CHANGELOG
  • 6b47827 added environment variable DANGER_SKIP_WHEN_EMPTY
  • 2bcccbd Update issue_template.md

See the full diff

Package name: jest The new version differs by 250 commits.
  • be16e47 v27.0.0
  • 63102ec chore: update changelog for release
  • 564694a docs(blog): Jest 27 blog post (#11131)
  • b68d91b feat(pretty-print): add option `printBasicPrototype` (#11441)
  • 2226742 chore: minor simplify format results error (#11432)
  • 78eb25d chore: remove needless assign (#11433)
  • 696c455 chore: update lockfile after publish
  • e2eb9ae v27.0.0-next.11
  • 3b253f8 Wait for closed resources to actually close before detecting open handles (#11429)
  • 27bee72 fix: run GC before collecting open handles (#11278)
  • 50451df feat: use fallback if prettier not found (#11400)
  • 150dbd8 chore: update lockfile after publish
  • 6f44529 v27.0.0-next.10
  • cbcec7d Upgrade fsevents in jest-haste-map (#11428)
  • 9633a26 feat: support reporters written in ESM (#11427)
  • 59f42d8 fix: do not cache modules that throw during evaluation (#11263)
  • 57e32e9 Detect open handles with done callbacks (#11382)
  • a397607 Document and test dontThrow for custom inline snapshot matchers (#10995)
  • 4fa3a0b feat: custom haste (#11107)
  • 2047a36 chore: bump deps (#11419)
  • a4358d6 chore: run prettier on changelog
  • bdd6282 Move all default values into `jest-config` (#9924)
  • db643a1 Link to Jest config (#11106)
  • b16082c Fix locale issue #10014 (#11412)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

@github-actions github-actions bot added the deps label Jun 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants