Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 44 vulnerabilities #103

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Fix for 44 vulnerabilities #103

wants to merge 1 commit into from

Conversation

snyk-rogerio
Copy link
Owner

snyk-top-banner

Snyk has created this PR to fix 44 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • SCA/JS/package.json
  • SCA/JS/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Arbitrary Code Execution
SNYK-JS-EXIFTOOLVENDOREDPL-1279041		   813  
high severity Remote Code Execution (RCE)
SNYK-JS-EJS-2803307		   461  
critical severity Arbitrary Code Execution
SNYK-JS-TOTAL4-1130527		   324  
critical severity Arbitrary Code Execution
SNYK-JS-TOTALJS-1088607		   324  
critical severity Arbitrary Code Execution
SNYK-JS-TOTALJS-6056532		   323  
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERY-567880		   268  
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERY-565129		   244  
high severity Arbitrary Code Injection
SNYK-JS-XMLHTTPREQUESTSSL-1082936		   243  
high severity Code Injection
SNYK-JS-LODASH-1040724		   239  
high severity Arbitrary Code Execution
npm:ejs:20161128		   222  
high severity Remote Code Execution (RCE)
SNYK-JS-HANDLEBARS-1056767		   216  
high severity Arbitrary Code Execution
SNYK-JS-HANDLEBARS-534478		   214  
critical severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-598223		   195  
high severity Cross-site Scripting (XSS)
npm:marked:20150520		   190  
medium severity Arbitrary Code Injection
SNYK-JS-EJS-1049328		   167  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-568922		   165  
high severity Cross-site Scripting (XSS)
npm:marked:20170815		   154  
high severity Cross-site Scripting (XSS)
npm:marked:20170112		   152  
high severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-543825		   142  
high severity Cross-site Scripting (XSS)
npm:tinymce:20150610		   139  
high severity Cross-site Scripting (XSS)
npm:tinymce:20150813		   139  
high severity Cross-site Scripting (XSS)
npm:tinymce:20170613		   139  
medium severity Cross-site Scripting (XSS)
npm:ejs:20161130		   134  
medium severity Cross-site Scripting (XSS)
SNYK-JS-KARMA-2395349		   123  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TOTAL4-5497333		   123  
medium severity Cross-site Scripting (XSS)
npm:tinymce:20180522		   118  
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867		   105  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-7278053		   98  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-7278059		   98  
medium severity Cross-site Scripting (XSS)
npm:marked:20170815-1		   95  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-1910225		   89  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-1766967		   88  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-6016276		   88  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-6016290		   88  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-6062167		   88  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-1056408		   83  
medium severity Cross-site Scripting (XSS)
npm:jquery:20150627		   82  
low severity Cross-site Scripting
SNYK-JS-SEND-7926862		   79  
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865		   79  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-3166281		   78  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-1298037		   70  
medium severity Cross-Site Scripting (XSS)
SNYK-JS-TINYMCE-6501006		   52  
medium severity Cross-site Scripting (XSS)
SNYK-JS-TINYMCE-6501605		   52  
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060		   44  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)
🦉 Arbitrary Code Injection

@snyk-bot
fix: SCA/JS/package.json & SCA/JS/package-lock.json to reduce vulnera…
70cdac9 
…bilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-EXIFTOOLVENDOREDPL-1279041
- https://snyk.io/vuln/SNYK-JS-EJS-2803307
- https://snyk.io/vuln/SNYK-JS-TOTAL4-1130527
- https://snyk.io/vuln/SNYK-JS-TOTALJS-1088607
- https://snyk.io/vuln/SNYK-JS-TOTALJS-6056532
- https://snyk.io/vuln/SNYK-JS-JQUERY-567880
- https://snyk.io/vuln/SNYK-JS-JQUERY-565129
- https://snyk.io/vuln/SNYK-JS-XMLHTTPREQUESTSSL-1082936
- https://snyk.io/vuln/SNYK-JS-LODASH-1040724
- https://snyk.io/vuln/npm:ejs:20161128
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478
- https://snyk.io/vuln/SNYK-JS-TINYMCE-598223
- https://snyk.io/vuln/npm:marked:20150520
- https://snyk.io/vuln/SNYK-JS-EJS-1049328
- https://snyk.io/vuln/SNYK-JS-TINYMCE-568922
- https://snyk.io/vuln/npm:marked:20170815
- https://snyk.io/vuln/npm:marked:20170112
- https://snyk.io/vuln/SNYK-JS-TINYMCE-543825
- https://snyk.io/vuln/npm:tinymce:20150610
- https://snyk.io/vuln/npm:tinymce:20150813
- https://snyk.io/vuln/npm:tinymce:20170613
- https://snyk.io/vuln/npm:ejs:20161130
- https://snyk.io/vuln/SNYK-JS-KARMA-2395349
- https://snyk.io/vuln/SNYK-JS-TOTAL4-5497333
- https://snyk.io/vuln/npm:tinymce:20180522
- https://snyk.io/vuln/SNYK-JS-EXPRESS-7926867
- https://snyk.io/vuln/SNYK-JS-TINYMCE-7278053
- https://snyk.io/vuln/SNYK-JS-TINYMCE-7278059
- https://snyk.io/vuln/npm:marked:20170815-1
- https://snyk.io/vuln/SNYK-JS-TINYMCE-1910225
- https://snyk.io/vuln/SNYK-JS-TINYMCE-1766967
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6016276
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6016290
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6062167
- https://snyk.io/vuln/SNYK-JS-TINYMCE-1056408
- https://snyk.io/vuln/npm:jquery:20150627
- https://snyk.io/vuln/SNYK-JS-SEND-7926862
- https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865
- https://snyk.io/vuln/SNYK-JS-TINYMCE-3166281
- https://snyk.io/vuln/SNYK-JS-TINYMCE-1298037
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6501006
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6501605
- https://snyk.io/vuln/SNYK-JS-COOKIE-8163060
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@snyk-rogerio @snyk-bot