Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 2 vulnerabilities #45

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

damodarnaik
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • visual_console_client/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 823/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6
Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864
Yes Proof of Concept
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @typescript-eslint/eslint-plugin The new version differs by 38 commits.
  • 05ba268 chore: publish v2.0.0
  • 0cfc48e fix(typescript-estree): jsx comment parsing (#703)
  • 0c4f474 feat(eslint-plugin): [interface-name-prefix, class-name-casing] Add allowUnderscorePrefix option to support private declarations (#790)
  • d3470c9 feat(eslint-plugin)!: recommended-requiring-type-checking config (#846)
  • 90b36dd docs(eslint-plugin): update ROADMAP.md (#844)
  • 428567d feat(eslint-plugin)!: change recommended config (#729)
  • de6cc1d docs(eslint-plugin): [no-useless-constructor] add example setup (#837)
  • ebbcc01 fix(eslint-plugin): [efrt] flag default export w/allowExpressions (#831)
  • 42b3013 chore: misc package.json updates related to v2 (#832)
  • 3c902a1 fix(eslint-plugin): add `Literal` to `RuleListener` types (#824)
  • 39e41b5 fix(eslint-plugin): [typedef] support "for..in", "for..of" (#787)
  • 84916e6 fix(eslint-plugin): [typedef] support default value for parameter (#785)
  • 73f8c79 docs(prefer-readonly): add rule name to title (#779)
  • b731df9 docs(eslint-plugin): Improve ban-types description (#773)
  • 22e9ae5 fix(eslint-plugin): [no-explicit-any] Fix ignoreRestArgs for interfaces (#777)
  • 24dac45 docs: fix typo in documentation for explicit-function-return-type (#772)
  • f953cbd test: ensure integration tests can fail, add vue-sfc (#768)
  • 3777b77 feat(typescript-estree)!: throw error on file not in project when `project` set (#760)
  • 4496288 chore: tighter linting (#535)
  • 211b1b5 fix(eslint-plugin): [prefer-readonly] TypeError when having comp… (#761)
  • 2b942ba feat(eslint-plugin): added new rule use-default-type-parameter (#562)
  • 55e788c fix(eslint-plugin): [no-useless-constructor] handle bodyless constructor (#685)
  • 92e98de feat(eslint-plugin)!: add rule `consistent-type-assertions` (#731)
  • 15191bb test: setup for real-world performance testing (#458)

See the full diff

Package name: webpack-dev-server The new version differs by 250 commits.
  • 5aad1e7 chore(release): 4.8.0
  • 28ad7ed chore(deps): bump graceful-fs from 4.2.9 to 4.2.10 (#4368)
  • 7920364 feat: export initialized socket client (#4304)
  • 4e7800e chore: update webpack (#4367)
  • fbda2a8 chore(deps-dev): bump body-parser from 1.19.2 to 1.20.0 (#4366)
  • 67c080b chore(deps-dev): bump puppeteer from 13.5.1 to 13.5.2 (#4361)
  • 56ec411 chore(deps): bump html-entities from 2.3.2 to 2.3.3 (#4358)
  • ca8a53a chore: update deps and fix audit (#4356)
  • 501f6aa chore(deps-dev): bump @ babel/runtime
  • 7d2b4f0 chore(deps-dev): bump @ babel/core
  • 95e26fe test: add cases for `webSocketURL` with `server` option (#4346)
  • 84b4774 chore: migrate script for examples on `setupMiddlewares` option (#4347)
  • a7ccab1 chore: replace deprecated String.prototype.substr() (#4343)
  • 1bf2614 chore(deps-dev): bump lint-staged from 12.3.6 to 12.3.7 (#4344)
  • 188497a chore(deps-dev): bump prettier from 2.5.1 to 2.6.0 (#4339)
  • 7560a37 chore(deps-dev): bump lint-staged from 12.3.5 to 12.3.6 (#4341)
  • dc2d6f7 chore(deps): bump http-proxy-middleware from 2.0.3 to 2.0.4 (#4333)
  • 552e4ab chore(deps-dev): bump @ babel/runtime
  • af3de07 chore(deps-dev): bump @ babel/core
  • a80fa1f chore(deps): bump @ types/ws
  • 457e1e5 chore(deps-dev): bump eslint from 8.10.0 to 8.11.0 (#4334)
  • b48ff7f chore(deps-dev): bump puppeteer from 13.5.0 to 13.5.1 (#4330)
  • 3ce15d4 chore(deps-dev): bump puppeteer from 13.4.1 to 13.5.0 (#4329)
  • a892235 chore(deps-dev): bump lint-staged from 12.3.4 to 12.3.5 (#4328)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)
🦉 Regular Expression Denial of Service (ReDoS)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants