Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade cheerio from 1.0.0-rc.3 to 1.0.0 #72

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

0xbaha
Copy link

@0xbaha 0xbaha commented Oct 18, 2024

Snyk has created this PR to upgrade cheerio from 1.0.0-rc.3 to 1.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 10 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2024-08-09.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860
624/1000
Why? Has a fix available, CVSS 8.2
No Known Exploit
Code Injection
SNYK-JS-LODASH-1040724
624/1000
Why? Has a fix available, CVSS 8.2
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-NTHCHECK-1586032
624/1000
Why? Has a fix available, CVSS 8.2
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
624/1000
Why? Has a fix available, CVSS 8.2
No Known Exploit
Open Redirect
SNYK-JS-EXPRESS-6474509
624/1000
Why? Has a fix available, CVSS 8.2
No Known Exploit
Cross-site Scripting
SNYK-JS-EXPRESS-7926867
624/1000
Why? Has a fix available, CVSS 8.2
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
624/1000
Why? Has a fix available, CVSS 8.2
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
624/1000
Why? Has a fix available, CVSS 8.2
Proof of Concept
Cross-site Scripting
SNYK-JS-SEND-7926862
624/1000
Why? Has a fix available, CVSS 8.2
No Known Exploit
Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
624/1000
Why? Has a fix available, CVSS 8.2
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: cheerio from cheerio GitHub release notes
Commit messages
Package name: cheerio
  • 50b5d5c 1.0.0
  • eea2fec fix(eslint): Disable misfiring lint rule
  • e60f659 chore(package): Update published files
  • 4fe3e7b chore(docs): Add 1.0 Announcement Post (#3984)
  • 944553b build(deps): bump docusaurus-plugin-typedoc in /website (#3983)
  • e34967e build(deps-dev): bump tsx from 4.16.5 to 4.17.0 (#3982)
  • eb7122b chore(traversing): Add test case for `lowerCaseTags` (#3981)
  • b824ba8 fix(website): Fix ReactLiveScope examples (#3980)
  • 08ebee5 build(deps-dev): bump eslint-plugin-jsdoc from 49.0.0 to 50.0.0 (#3979)
  • bf5f44c build(deps-dev): bump eslint-plugin-jsdoc from 48.11.0 to 49.0.0 (#3976)
  • c9b92c1 docs(readme): Update Sponsors (#3978)
  • 816cff3 build(deps-dev): bump husky from 8.0.3 to 9.1.4 (#3952)
  • e739aad Bump minimum Node version to 18.17, upgrade undici (#3959)
  • 48a86bd build(deps-dev): bump @ typescript-eslint from 7.18.0 to 8.0.1 (#3972)
  • d6cc54f fix(website): Update markup in loading example (#3642)
  • e48f022 fix(website): Revert docusaurus changes, fixes
  • 98e41ae chore: Add `ts` lint (#3975)
  • bcdc28e Update Sponsors (#3963)
  • ca00ea5 refactor: Make exports explicit
  • 5f9b028 refactor: Remove unused eslint disable directives
  • 599967f fix(website): Remove invalid redirects
  • d4eb8d3 Remove deprecated exports (#3974)
  • c07bbf0 Fix web builds (#3973)
  • caab069 Update build tooling, update imports, require Node 16 (#3970)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants