Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade redoc from 2.0.0-alpha.17 to 2.0.0 #45

Open
wants to merge 1 commit into
base: source
Choose a base branch
from

Conversation

golanha
Copy link
Member

@golanha golanha commented Jun 30, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade redoc from 2.0.0-alpha.17 to 2.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 105 versions ahead of your current version.
  • The recommended version was released 10 months ago, on 2022-09-13.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-LODASH-608086
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-73638
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-INI-1048974
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-DOMPURIFY-1016634
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-DOMPURIFY-1035544
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Cross-site Scripting (XSS)
SNYK-JS-DOMPURIFY-2863266
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-DOMPURIFY-468981
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Information Exposure
SNYK-JS-SIMPLEGET-2361683
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Arbitrary File Overwrite
SNYK-JS-TAR-1536528
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536531
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579147
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579152
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PRISMJS-1076581
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PRISMJS-1314893
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PRISMJS-1585202
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-PRISMJS-597628
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-AJV-584908
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-1579269
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-1579269
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Remote Memory Exposure
SNYK-JS-BL-608877
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Arbitrary File Write
SNYK-JS-TAR-1579155
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-174125
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Poisoning
SNYK-JS-QS-3153490
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Arbitrary File Overwrite
SNYK-JS-FSTREAM-174725
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-Y18N-1021887
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Pollution
npm:extend:20180424
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Arbitrary Code Execution
SNYK-JS-JSYAML-174129
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Command Injection
SNYK-JS-LODASH-1040724
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-450202
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-567746
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-JSONPOINTER-1577287
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-JSONPOINTER-596925
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-PRISMJS-2404333
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-559764
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Server-Side Request Forgery (SSRF)
SNYK-JS-AXIOS-1038255
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Denial of Service (DoS)
SNYK-JS-AXIOS-174505
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Server-Side Request Forgery (SSRF)
SNYK-JS-AXIOS-1038255
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Denial of Service (DoS)
SNYK-JS-AXIOS-174505
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-73639
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-174116
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-2342073
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-2342082
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-451540
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-584281
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Cross-site Scripting (XSS)
SNYK-JS-REDOC-574605
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Server-side Request Forgery (SSRF)
SNYK-JS-REQUEST-3361831
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-YARGSPARSER-560381
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Time of Check Time of Use (TOCTOU)
npm:chownr:20180731
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Denial of Service (DoS)
SNYK-JS-JSYAML-173999
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Denial of Service (DoS)
npm:mem:20180117
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:slugify:20180805
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-2429795
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POLISHED-1298071
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-2429795
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Proof of Concept
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346
686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: redoc
  • 2.0.0 - 2022-09-13
    No content.
  • 2.0.0-rc.8-1 - 2019-05-13
  • 2.0.0-rc.77 - 2022-09-06

    2.0.0-rc.77 (2022-09-06)

    Bug Fixes

    • add hard limit on deref depth to prevent crashes (ddde105)
    • do not use discriminator when specific schema was referenced in oneOf or anyOf (#2153) (6ac1e1e)
    • hoistOneOf missing refs stack and improve allOf for same $ref (bb325d0)
    • latest docker cli tag (#2140) (8dc03eb)
    • markdown parent name (#2062) (da9ed0b)

    Features

  • 2.0.0-rc.76 - 2022-08-18

    2.0.0-rc.76 (2022-08-18)

    Bug Fixes

    Features

  • 2.0.0-rc.75 - 2022-08-10

    2.0.0-rc.75 (2022-08-10)

    Bug Fixes

    Features

    • add notification about new version available (#2100) (d6ca8cc)
  • 2.0.0-rc.74 - 2022-07-28

    2.0.0-rc.74 (2022-07-28)

    Bug Fixes

  • 2.0.0-rc.73 - 2022-07-28

    chore: v.2.0.0-rc.73 (#2103)

  • 2.0.0-rc.72 - 2022-06-02

    2.0.0-rc.72 (2022-06-02)

    Bug Fixes

    • handled style change in ServerUrl and ServersOverlay dynamically (#1989) (a366de4)
    • nested items with refs (#2035) (51127aa)
  • 2.0.0-rc.71 - 2022-05-31

    2.0.0-rc.71 (2022-05-31)

    Bug Fixes

    Features

  • 2.0.0-rc.70 - 2022-05-17

    2.0.0-rc.70 (2022-05-17)

    Features

  • 2.0.0-rc.69 - 2022-05-12

    v2.0.0-rc.69 (2022-05-12)

    Bug Fixes

    • wrong base url format causing error when constructing new URL (#1996) (d2cdaa1)

    Features

  • 2.0.0-rc.68 - 2022-05-10
  • 2.0.0-rc.67 - 2022-04-28
  • 2.0.0-rc.66 - 2022-03-30
  • 2.0.0-rc.65 - 2022-03-15
  • 2.0.0-rc.64 - 2022-02-24
  • 2.0.0-rc.63 - 2022-01-27
  • 2.0.0-rc.62 - 2022-01-26
  • 2.0.0-rc.61 - 2022-01-25
  • 2.0.0-rc.60 - 2022-01-25
  • 2.0.0-rc.59 - 2021-12-09
  • 2.0.0-rc.58 - 2021-11-29
  • 2.0.0-rc.57 - 2021-10-11
  • 2.0.0-rc.56 - 2021-08-11
  • 2.0.0-rc.55 - 2021-07-16
  • 2.0.0-rc.54 - 2021-06-09
  • 2.0.0-rc.53 - 2021-04-12
  • 2.0.0-rc.52 - 2021-04-09
  • 2.0.0-rc.51 - 2021-04-08
  • 2.0.0-rc.50 - 2021-02-15
  • 2.0.0-rc.49 - 2021-01-30
  • 2.0.0-rc.48 - 2020-11-30
  • 2.0.0-rc.47 - 2020-11-17
  • 2.0.0-rc.46 - 2020-11-05
  • 2.0.0-rc.45 - 2020-10-27
  • 2.0.0-rc.44 - 2020-10-16
  • 2.0.0-rc.43 - 2020-10-13
  • 2.0.0-rc.42 - 2020-10-13
  • 2.0.0-rc.41 - 2020-09-24
  • 2.0.0-rc.40 - 2020-08-24
  • 2.0.0-rc.39 - 2020-08-22
  • 2.0.0-rc.38 - 2020-08-20
  • 2.0.0-rc.37 - 2020-08-14
  • 2.0.0-rc.36 - 2020-08-04
  • 2.0.0-rc.35 - 2020-07-24
  • 2.0.0-rc.34 - 2020-07-24
  • 2.0.0-rc.33 - 2020-07-21
  • 2.0.0-rc.32 - 2020-07-21
  • 2.0.0-rc.31 - 2020-06-25
  • 2.0.0-rc.30 - 2020-05-25
  • 2.0.0-rc.29 - 2020-05-10
  • 2.0.0-rc.28 - 2020-04-27
  • 2.0.0-rc.27 - 2020-04-20
  • 2.0.0-rc.26 - 2020-03-29
  • 2.0.0-rc.25 - 2020-03-27
  • 2.0.0-rc.24 - 2020-03-17
  • 2.0.0-rc.23 - 2020-02-09
  • 2.0.0-rc.22 - 2020-01-15
  • 2.0.0-rc.21 - 2020-01-10
  • 2.0.0-rc.20 - 2019-12-13
  • 2.0.0-rc.19 - 2019-12-13
  • 2.0.0-rc.18 - 2019-10-16
  • 2.0.0-rc.17 - 2019-10-16
  • 2.0.0-rc.16 - 2019-09-30
  • 2.0.0-rc.15 - 2019-09-30
  • 2.0.0-rc.14 - 2019-08-07
  • 2.0.0-rc.13 - 2019-08-01
  • 2.0.0-rc.12 - 2019-07-30
  • 2.0.0-rc.11 - 2019-07-30
  • 2.0.0-rc.10 - 2019-07-08
  • 2.0.0-rc.9 - 2019-06-27
  • 2.0.0-rc.8 - 2019-05-13
  • 2.0.0-rc.7 - 2019-05-13
  • 2.0.0-rc.6 - 2019-05-13
  • 2.0.0-rc.5 - 2019-05-13
  • 2.0.0-rc.4 - 2019-03-15
  • 2.0.0-rc.3 - 2019-03-15
  • 2.0.0-rc.2 - 2019-01-27
  • 2.0.0-rc.1 - 2019-01-17
  • 2.0.0-rc.0 - 2018-11-27
  • 2.0.0-alpha.40-1 - 2018-10-05
  • 2.0.0-alpha.37-internal - 2018-08-12
  • 2.0.0-alpha.41 - 2018-10-18
  • 2.0.0-alpha.40 - 2018-10-05
  • 2.0.0-alpha.39 - 2018-09-14
  • 2.0.0-alpha.38 - 2018-08-24
  • 2.0.0-alpha.37 - 2018-08-22
  • 2.0.0-alpha.36 - 2018-08-11
  • 2.0.0-alpha.35 - 2018-08-09
  • 2.0.0-alpha.34 - 2018-08-08
  • 2.0.0-alpha.33 - 2018-07-31
  • 2.0.0-alpha.32 - 2018-07-26
  • 2.0.0-alpha.31 - 2018-07-23
  • 2.0.0-alpha.30 - 2018-07-19
  • 2.0.0-alpha.29 - 2018-07-18
  • 2.0.0-alpha.28 - 2018-06-29
  • 2.0.0-alpha.27 - 2018-06-29
  • 2.0.0-alpha.26 - 2018-06-28
  • 2.0.0-alpha.25 - 2018-06-25
  • 2.0.0-alpha.24 - 2018-06-01
  • 2.0.0-alpha.23 - 2018-05-31
  • 2.0.0-alpha.22 - 2018-05-29
  • 2.0.0-alpha.21 - 2018-05-28
  • 2.0.0-alpha.20 - 2018-05-14
  • 2.0.0-alpha.19 - 2018-05-14
  • 2.0.0-alpha.17 - 2018-03-21
from redoc GitHub release notes
Commit messages
Package name: redoc
  • 5fb4daa chore: v2.0.0 (#2160)
  • 6f6a3f0 chore(deps): bump trim-newlines from 1.0.0 to 3.0.1 (#2161)
  • 64cf624 chore: rename master branch to main (#2163)
  • 16f542b Update feature_request.md
  • aa3f9bc Update bug_report.md
  • 9d36b32 chore: cli-v0.13.20 (#2155)
  • c374b2d chore: reinstall cli with new npm for update npm-shrinkwrap.json (#2156)
  • 580f883 chore: v2.0.0-rc.77 (#2154)
  • da9ed0b fix: markdown parent name (#2062)
  • 3241000 chore: remove useless types libraries already included (#2144)
  • c52ee83 feet: search feature to support `path` (#2145)
  • ddde105 fix: add hard limit on deref depth to prevent crashes
  • bb325d0 fix: hoistOneOf missing refs stack and improve allOf for same $ref
  • 6ac1e1e fix: do not use discriminator when specific schema was referenced in oneOf or anyOf (#2153)
  • 8dc03eb fix: latest docker cli tag (#2140)
  • acb72d5 chore: cli-v0.13.19 (#2139)
  • c7d5ae0 fix: invalidate cache action (#2138)
  • 0b87d25 chore: v2.0.0-rc.76 (#2137)
  • d8093e3 feat: add clear cache for publish action (#2129)
  • 7816902 fix: encoding issue in CDN responses (#2130)
  • efd5e09 fix: Optional authentication not rendered properly (#2117) (#2134)
  • c60c6f5 fix: "API Docs By Redocly" overlapping last element in sidebar (#2132)
  • c24b31b chore: cli-v0.13.18 (#2128)
  • d7440fb chore: fix integratin test in publish script (#2127)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


This change is Reviewable

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants