[Snyk] Upgrade webpack-cli from 3.1.0 to 3.3.12

[snyk-bot]

Snyk has created this PR to upgrade webpack-cli from 3.1.0 to 3.3.12.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 19 versions ahead of your current version.
• The recommended version was released a year ago, on 2020-06-18.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Arbitrary File Overwrite SNYK-JS-TAR-174125	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1085630	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-SETVALUE-450213	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-SETVALUE-450213	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Arbitrary Code Injection SNYK-JS-SERIALIZEJAVASCRIPT-570062	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-536840	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-MIXINDEEP-450212	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-73638	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-608086	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-590103	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-450202	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Command Injection SNYK-JS-LODASH-1040724	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-INI-1048974	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-571484	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-AJV-584908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Denial of Service (DoS) npm:mem:20180117	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Time of Check Time of Use (TOCTOU) npm:chownr:20180731	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-YARGSPARSER-560381	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-567746	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Timing Attack SNYK-JS-ELLIPTIC-511941	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Validation Bypass SNYK-JS-KINDOF-537849	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack-cli

• 3.3.12 - 2020-06-18
  

  chore(release): 3.3.12

• 3.3.11 - 2020-02-11
• 3.3.10 - 2019-10-31
• 3.3.9 - 2019-09-17
• 3.3.8 - 2019-09-05
• 3.3.7 - 2019-08-18
• 3.3.6 - 2019-07-14
• 3.3.5 - 2019-06-23
• 3.3.4 - 2019-06-11
• 3.3.3 - 2019-06-07
• 3.3.2 - 2019-05-04
• 3.3.1 - 2019-04-21
• 3.3.0 - 2019-03-15
• 3.2.3 - 2019-02-05
• 3.2.2 - 2019-02-05
• 3.2.1 - 2019-01-07
• 3.2.0 - 2019-01-03
• 3.1.2 - 2018-09-29
• 3.1.1 - 2018-09-23
• 3.1.0 - 2018-07-18

from webpack-cli GitHub release notes

Commit messages

Package name: webpack-cli

• 33574ec chore(release): 3.3.12
• 4f1a2f3 chore: bump dependencies for v3 (No way to specify webpack 4 "mode" in WebpackDevMiddlewareOptions? aspnet/JavaScriptServices#1595)
• ab910df docs(templates): Branding guide violation fix (Adding ng-bootstrap to Angular template breaks AoT build aspnet/JavaScriptServices#1226)
• c9927e3 fix: release stable
• a037dc8 fix: ci (Call to Node module failed with error: Error: [object Object] = Bad Error Message aspnet/JavaScriptServices#1193)
• f9f0860 chore: v3.3.10
• 08a7650 chore: remove un-synced tests
• 1208aa6 feat: add new flag and patch sec dep (On Windows, patch Node's lstat to work around permissions error. Fixes #1101 aspnet/JavaScriptServices#1102)
• 6ad6099 chore: sec patch
• 48c03ab chore: v3.3.9
• a1341bd Merge pull request Remove AssetTargetFramework aspnet/JavaScriptServices#1078 from lneveu/fix/process-exit-hang
• ee001bd fix: use process.exitCode instead of process.exit in compilerCallback
• 7b1e946 chore: version update
• 64fd810 Merge pull request HMR updates entire <app> node instead of counter component aspnet/JavaScriptServices#1065 from webpack/fix/patch
• 70bf934 tests: add schema tests
• 4275fd5 chore: remove lint err
• 065e87e chore: abstract validation
• 55b770c chore: vuln patch
• d28f9f5 fix: support both webpack versions
• 9487ee5 chore: v3.3.7
• b20ecd3 Merge pull request System.Net.Http.WinHttpException when using WebpackDevMiddleware and Node v8.1.0 aspnet/JavaScriptServices#1024 from webpack/fix/no-config-mode
• 45b9127 chore: resolve differently
• 43fc033 chore: update lockfile & pass nil
• 97d5c75 chore: lock deps

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs