Skip to content

Comments

[Snyk] Fix for 2 vulnerabilities#5

Open
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-56736a0d2f12a1b030e1234acd51b0a7
Open

[Snyk] Fix for 2 vulnerabilities#5
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-56736a0d2f12a1b030e1234acd51b0a7

Conversation

@snyk-bot
Copy link
Contributor

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640
Yes No Known Exploit
medium severity 556/1000
Why? Recently disclosed, Has a fix available, CVSS 5.4
Cross-site Scripting (XSS)
SNYK-JS-VCONSOLE-1244101
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: postcss-px-to-viewport The new version differs by 40 commits.
  • ab547f4 Merge pull request #23 from evrone/version-update
  • 68a3074 fix postcss link
  • b6e87a7 fix readme
  • fe51beb fix link in readme
  • 2ec80c9 update version and readme
  • 6f44bd0 Merge pull request #20 from evrone/add-prop-list
  • 97ac0f0 Merge remote-tracking branch 'remotes/origin/master' into add-prop-list
  • 2e360e5 Merge pull request #21 from evrone/add-replace-flag
  • 18eea3c remove ignorecase
  • 4746999 Merge remote-tracking branch 'origin/master' into add-prop-list
  • 7553506 Merge remote-tracking branch 'origin/master' into add-replace-flag
  • 2cd143a Merge pull request #22 from evrone/update-readme
  • 3d1d820 Merge pull request #19 from evrone/add-unitless-if-zero
  • b09d96e Merge pull request #18 from evrone/ignore-case
  • 47110d3 Merge pull request #14 from msidolphin/master
  • 4dd9241 update readme
  • 7576435 update readme
  • fd6457f update readme
  • 5f3c1b2 add tests on propList
  • c15c1fa add replace flag
  • 009d9ed add prop list
  • 1d2e9be file path maybe undefined
  • 518a69a add exclude option test cases
  • 1145e1d add unitless if zero

See the full diff

Package name: vconsole The new version differs by 221 commits.
  • 0cbe3e0 feat: v3.4.1 released
  • a377da7 docs: update changelog
  • fd2d198 docs: update changelog
  • a22ad8b feat: v3.4.1 released
  • 18a582e docs: update changelog
  • 232ff55 fix: Fix XSS risk in Network tab.
  • f4c48fc feat: Add `setSwitchPosition(x, y)` method to update the position of switch button, see [Tutorial](./doc/public_properties_methods.md) for more details.
  • eb424de fix: update theme style after `setOption()`.
  • 0336be7 fix: fix `requestHeader` display
  • 2a175e4 chore: update gitignore
  • f5cf794 fix: Add `Symbol` polyfill. (issue #361)
  • 73e1941 fix: Fix `fetch` optional parameter `init`. (issue #363, #365)
  • fc3ef6e chore: remove transitionEnd. (issue #364)
  • 9499599 feat: v3.4.0 released
  • 4ad1fb3 docs: update snapshot
  • 0063a0e docs: update snapshot
  • 751e44c fix: remove "?" query in name with empty query
  • 4599262 chore: update ajax
  • a7d6e93 chore: remove Zepto
  • de11b51 docs: update
  • d981153 feat: Add Request Headers to Network tab. Use short URL and display parameters in Network tab. (issue #291)
  • b4892f2 feat: Auto move input cursor to the bracket after autocomplete command. (issue #293)
  • 0d00f03 fix typo
  • d9acb15 fix typo

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant