New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 6 vulnerabilities #94

Open

MaxMood96 wants to merge 1 commit into main from snyk-fix-22fe5df8ed54a7971b6cfaf25c8cd404

Owner

MaxMood96 commented Nov 9, 2022

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- client/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Validation Bypass SNYK-JS-SANITIZEHTML-1070780	Yes	Proof of Concept
	539/1000 Why? Has a fix available, CVSS 6.5	Access Restriction Bypass SNYK-JS-SANITIZEHTML-1070786	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SANITIZEHTML-2957526	Yes	No Known Exploit
	684/1000 Why? Has a fix available, CVSS 9.4	Arbitrary Code Execution SNYK-JS-SANITIZEHTML-585892	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 250 commits.

0c6cd61 chore(release): Publish
5e8e621 chore: Update main README (Fix images link in chinese translation freeCodeCamp/freeCodeCamp#36954)
7130cd4 test(gatsby): Slices API integration tests (Use local state for expanded state on Map freeCodeCamp/freeCodeCamp#36747)
6496eed chore(release): Publish next
bc7ac84 chore: preserve previous webpack stats derived values, even if we restart webpack itself (Update CONTRIBUTING.md freeCodeCamp/freeCodeCamp#36980)
2b5af32 fix: drop `__renderedByLocation` prop when calculating slice props hashes and don't expose it to slice component (Update how-to-setup-freecodecamp-locally.md freeCodeCamp/freeCodeCamp#36979)
cc1ee9b chore(release): Publish next
6a53861 chore(gatsby-link): Correct type export (Added solution to "01-Responsive Web design" challenge freeCodeCamp/freeCodeCamp#36968)
0ad6314 fix(gatsby-graphiql-explorer): Use upstream exporter package (Gramatical change in the documentation freeCodeCamp/freeCodeCamp#36966)
964265c chore(release): Publish next
b624442 chore: Update peerDeps (Resolves #36836 Updated to reflect fixed position effect on scrolling freeCodeCamp/freeCodeCamp#36965)
b2ab092 chore(release): Publish next
e2a14bf feat(gatsby): Slices <> partial hydration interop (Improve Arabic translation freeCodeCamp/freeCodeCamp#36960)
0083e62 fix(deps): update starters and examples gatsby packages to ^4.24.7 (layout subheader fix 'Example' onto newline freeCodeCamp/freeCodeCamp#36957)
68e9cab chore(changelogs): update changelogs (grammar fix (lines 37-41) freeCodeCamp/freeCodeCamp#36958)
b9eb8d2 chore(deps): update dependency autoprefixer to ^10.4.13 for gatsby-plugin-sass (grammatical fixes freeCodeCamp/freeCodeCamp#36934)
58c37ea chore(deps): update dependency @ jridgewell/trace-mapping to ^0.3.17 for gatsby-legacy-polyfills (feat(curriculum): Add solution to combining an array into an string freeCodeCamp/freeCodeCamp#36933)
a5e4c47 fix(deps): update dependency body-parser to ^1.20.1 for gatsby-source-drupal (added python code for the above freeCodeCamp/freeCodeCamp#36940)
c86aa7e chore(docs): Add clarification for Pro Tip on Part 4 of tutorial (Fixed language capitalization 3 freeCodeCamp/freeCodeCamp#36918)
d5c775a feat(gatsby): handle graphql-import-node bundling (Fix grammar and edit the DELETE Request's name freeCodeCamp/freeCodeCamp#36951)
59e2976 feat(gatsby-remark-embed-snippet): added csproj to language map so it will be recognized as xml (Fix language capitalization 4 freeCodeCamp/freeCodeCamp#36919)
c8a7dda chore(docs): Valhalla Content Hub Reference Guide (Fixed grammatical errors in chain-middleware-to-create-a-time-server.spanish.md freeCodeCamp/freeCodeCamp#36949)
3044280 fix(gatsby): stitch slices if just page html was regenerating without any of used slices regenerating (add the update changes to file freeCodeCamp/freeCodeCamp#36950)
10abdcb chore(release): Publish next

See the full diff

Package name: gatsby-cli

The new version differs by 250 commits.

0c6cd61 chore(release): Publish
5e8e621 chore: Update main README (Fix images link in chinese translation freeCodeCamp/freeCodeCamp#36954)
7130cd4 test(gatsby): Slices API integration tests (Use local state for expanded state on Map freeCodeCamp/freeCodeCamp#36747)
6496eed chore(release): Publish next
bc7ac84 chore: preserve previous webpack stats derived values, even if we restart webpack itself (Update CONTRIBUTING.md freeCodeCamp/freeCodeCamp#36980)
2b5af32 fix: drop `__renderedByLocation` prop when calculating slice props hashes and don't expose it to slice component (Update how-to-setup-freecodecamp-locally.md freeCodeCamp/freeCodeCamp#36979)
cc1ee9b chore(release): Publish next
6a53861 chore(gatsby-link): Correct type export (Added solution to "01-Responsive Web design" challenge freeCodeCamp/freeCodeCamp#36968)
0ad6314 fix(gatsby-graphiql-explorer): Use upstream exporter package (Gramatical change in the documentation freeCodeCamp/freeCodeCamp#36966)
964265c chore(release): Publish next
b624442 chore: Update peerDeps (Resolves #36836 Updated to reflect fixed position effect on scrolling freeCodeCamp/freeCodeCamp#36965)
b2ab092 chore(release): Publish next
e2a14bf feat(gatsby): Slices <> partial hydration interop (Improve Arabic translation freeCodeCamp/freeCodeCamp#36960)
0083e62 fix(deps): update starters and examples gatsby packages to ^4.24.7 (layout subheader fix 'Example' onto newline freeCodeCamp/freeCodeCamp#36957)
68e9cab chore(changelogs): update changelogs (grammar fix (lines 37-41) freeCodeCamp/freeCodeCamp#36958)
b9eb8d2 chore(deps): update dependency autoprefixer to ^10.4.13 for gatsby-plugin-sass (grammatical fixes freeCodeCamp/freeCodeCamp#36934)
58c37ea chore(deps): update dependency @ jridgewell/trace-mapping to ^0.3.17 for gatsby-legacy-polyfills (feat(curriculum): Add solution to combining an array into an string freeCodeCamp/freeCodeCamp#36933)
a5e4c47 fix(deps): update dependency body-parser to ^1.20.1 for gatsby-source-drupal (added python code for the above freeCodeCamp/freeCodeCamp#36940)
c86aa7e chore(docs): Add clarification for Pro Tip on Part 4 of tutorial (Fixed language capitalization 3 freeCodeCamp/freeCodeCamp#36918)
d5c775a feat(gatsby): handle graphql-import-node bundling (Fix grammar and edit the DELETE Request's name freeCodeCamp/freeCodeCamp#36951)
59e2976 feat(gatsby-remark-embed-snippet): added csproj to language map so it will be recognized as xml (Fix language capitalization 4 freeCodeCamp/freeCodeCamp#36919)
c8a7dda chore(docs): Valhalla Content Hub Reference Guide (Fixed grammatical errors in chain-middleware-to-create-a-time-server.spanish.md freeCodeCamp/freeCodeCamp#36949)
3044280 fix(gatsby): stitch slices if just page html was regenerating without any of used slices regenerating (add the update changes to file freeCodeCamp/freeCodeCamp#36950)
10abdcb chore(release): Publish next

See the full diff

Package name: gatsby-transformer-remark

The new version differs by 250 commits.

0c6cd61 chore(release): Publish
5e8e621 chore: Update main README (Fix images link in chinese translation freeCodeCamp/freeCodeCamp#36954)
7130cd4 test(gatsby): Slices API integration tests (Use local state for expanded state on Map freeCodeCamp/freeCodeCamp#36747)
6496eed chore(release): Publish next
bc7ac84 chore: preserve previous webpack stats derived values, even if we restart webpack itself (Update CONTRIBUTING.md freeCodeCamp/freeCodeCamp#36980)
2b5af32 fix: drop `__renderedByLocation` prop when calculating slice props hashes and don't expose it to slice component (Update how-to-setup-freecodecamp-locally.md freeCodeCamp/freeCodeCamp#36979)
cc1ee9b chore(release): Publish next
6a53861 chore(gatsby-link): Correct type export (Added solution to "01-Responsive Web design" challenge freeCodeCamp/freeCodeCamp#36968)
0ad6314 fix(gatsby-graphiql-explorer): Use upstream exporter package (Gramatical change in the documentation freeCodeCamp/freeCodeCamp#36966)
964265c chore(release): Publish next
b624442 chore: Update peerDeps (Resolves #36836 Updated to reflect fixed position effect on scrolling freeCodeCamp/freeCodeCamp#36965)
b2ab092 chore(release): Publish next
e2a14bf feat(gatsby): Slices <> partial hydration interop (Improve Arabic translation freeCodeCamp/freeCodeCamp#36960)
0083e62 fix(deps): update starters and examples gatsby packages to ^4.24.7 (layout subheader fix 'Example' onto newline freeCodeCamp/freeCodeCamp#36957)
68e9cab chore(changelogs): update changelogs (grammar fix (lines 37-41) freeCodeCamp/freeCodeCamp#36958)
b9eb8d2 chore(deps): update dependency autoprefixer to ^10.4.13 for gatsby-plugin-sass (grammatical fixes freeCodeCamp/freeCodeCamp#36934)
58c37ea chore(deps): update dependency @ jridgewell/trace-mapping to ^0.3.17 for gatsby-legacy-polyfills (feat(curriculum): Add solution to combining an array into an string freeCodeCamp/freeCodeCamp#36933)
a5e4c47 fix(deps): update dependency body-parser to ^1.20.1 for gatsby-source-drupal (added python code for the above freeCodeCamp/freeCodeCamp#36940)
c86aa7e chore(docs): Add clarification for Pro Tip on Part 4 of tutorial (Fixed language capitalization 3 freeCodeCamp/freeCodeCamp#36918)
d5c775a feat(gatsby): handle graphql-import-node bundling (Fix grammar and edit the DELETE Request's name freeCodeCamp/freeCodeCamp#36951)
59e2976 feat(gatsby-remark-embed-snippet): added csproj to language map so it will be recognized as xml (Fix language capitalization 4 freeCodeCamp/freeCodeCamp#36919)
c8a7dda chore(docs): Valhalla Content Hub Reference Guide (Fixed grammatical errors in chain-middleware-to-create-a-time-server.spanish.md freeCodeCamp/freeCodeCamp#36949)
3044280 fix(gatsby): stitch slices if just page html was regenerating without any of used slices regenerating (add the update changes to file freeCodeCamp/freeCodeCamp#36950)
10abdcb chore(release): Publish next

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Regular Expression Denial of Service (ReDoS)
🦉 More lessons are available in Snyk Learn


          fix: client/package.json to reduce vulnerabilities

d4e9511

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-GOT-2932019
- https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818
- https://snyk.io/vuln/SNYK-JS-SANITIZEHTML-1070780
- https://snyk.io/vuln/SNYK-JS-SANITIZEHTML-1070786
- https://snyk.io/vuln/SNYK-JS-SANITIZEHTML-2957526
- https://snyk.io/vuln/SNYK-JS-SANITIZEHTML-585892

github-actions bot added the platform: client label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

platform: client