[Snyk] Security upgrade onfido-sdk-ui from 13.6.1 to 14.15.0

[pavelbe4solutions]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Prototype Pollution SNYK-JS-DOMPURIFY-7984421	701

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[dryrunsecurity]

DryRun Security Summary

This pull request updates the onfido-sdk-ui package from version 13.6.1 to 14.15.0, which is a React Native SDK that provides a user interface for the Onfido identity verification service, and it is generally a positive change as it likely includes bug fixes, security improvements, and new features that enhance the security and reliability of the Onfido integration.

Expand for full summary

Summary:

The code change in this pull request updates the version of the onfido-sdk-ui package from 13.6.1 to 14.15.0. This package is a React Native SDK that provides a user interface for the Onfido identity verification service, which is a third-party service used for user onboarding and KYC (Know Your Customer) processes.

From an application security perspective, this update is generally a positive change, as it likely includes bug fixes, security improvements, and new features that enhance the security and reliability of the Onfido integration. Keeping dependencies up-to-date is an important part of maintaining a secure application. However, it's important to review the release notes or change log for the new version of the onfido-sdk-ui package to understand what has changed and evaluate any potential impact on the application. Significant changes to the SDK's functionality or API could require updates to the application's integration with Onfido. Additionally, it's recommended to thoroughly test the application after updating the onfido-sdk-ui package to ensure that the Onfido integration continues to work as expected and does not introduce any regressions or security vulnerabilities.

Files Changed:

• package.json: This file has been updated to use version 14.15.0 of the onfido-sdk-ui package, which is a React Native SDK that provides a user interface for the Onfido identity verification service.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	2 findings

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.