Skip to content
This repository has been archived by the owner on Feb 25, 2021. It is now read-only.

[Snyk] Security upgrade aws-amplify from 1.1.32 to 3.0.1 #808

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 616/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Server-Side Request Forgery (SSRF)
SNYK-JS-AXIOS-1038255
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: aws-amplify The new version differs by 250 commits.
  • 8bb1334 Publish
  • 440f25e Bumping api-rest and api-graphql versions to match npm
  • b4b40aa Merge pull request #5243 from aws-amplify/modularization
  • 9f2800d Revert from-package and use conventional commits for master in first release
  • 6b1ef79 Force lerna to publish major version from the package.json in unstable and latest release
  • 7fef140 Merge branch 'master' into modularization
  • c04349b Revert modularization specific circile CI changes
  • 4f3b285 Fix exporting the right amplify version
  • 815eef4 Publish
  • 4002776 Change new version of api-rest and api-graphql modules to 0.1
  • a105664 chore(release): Publish [ci skip]
  • 30e4c29 Preparing release
  • 21a00b4 Upgrade aws-sdk beta clients (#5234)
  • 31a273e Merge branch 'master' into modularization
  • 71044ae fix builds that were broken by new terser 4.6.8 version (#5233)
  • 2925d5b Fix unit tests following merge from master
  • e201cfd Merge branch 'modularization-Amplifiyer' into modularization
  • 082af2d Merge branch 'master' into modularization-Amplifiyer
  • d630c34 Added clientMetadata to sendMFACode (#5145)
  • 2a7fd81 Upgrade aws-sdk clients from alpha to beta (#5209)
  • 23d8d41 Export UsernameAttributes enum (#5197)
  • fe6aaf6 Fix unit tests as per expiration type change
  • 210410f Merge branch 'modularization' into modularization-Amplifiyer
  • 047b5a7 Update expiration type to Date as per change in aws-sdk

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant