[Snyk-dev] Fix for 90 vulnerabilities #382
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.
Changes included in this PR
Note for zero-installs users
If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the
.yarn/cache/
directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to runyarn
to update the contents of the./yarn/cache
directory.If you are not using zero-install you can ignore this as your flow should likely be unchanged.
Vulnerabilities that will be fixed
With an upgrade:
Why? Has a fix available, CVSS 8.1
SNYK-JS-AJV-584908
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-ANSIHTML-1296849
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-ASYNC-2441827
Why? Proof of Concept exploit, Has a fix available, CVSS 9.3
SNYK-JS-BABELTRAVERSE-5962462
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7
SNYK-JS-BL-608877
Why? Has a fix available, CVSS 7.5
SNYK-JS-BROWSERIFYSIGN-6037026
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-COLORSTRING-1082939
Why? Proof of Concept exploit, Has a fix available, CVSS 6.3
SNYK-JS-DOTPROP-543489
Why? Has a fix available, CVSS 6.8
SNYK-JS-ELLIPTIC-1064899
Why? Has a fix available, CVSS 5.9
SNYK-JS-ELLIPTIC-511941
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7
SNYK-JS-ELLIPTIC-571484
Why? Proof of Concept exploit, Has a fix available, CVSS 9.1
SNYK-JS-ELLIPTIC-7577916
Why? Proof of Concept exploit, Has a fix available, CVSS 9.1
SNYK-JS-ELLIPTIC-7577917
Why? Proof of Concept exploit, Has a fix available, CVSS 9.1
SNYK-JS-ELLIPTIC-7577918
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-ENGINEIO-1056749
Why? Has a fix available, CVSS 7.5
SNYK-JS-ENGINEIO-3136336
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5
SNYK-JS-EVENTSOURCE-2823375
Why? Has a fix available, CVSS 6.1
SNYK-JS-EXPRESS-6474509
Why? Recently disclosed, Has a fix available, CVSS 5.1
SNYK-JS-EXPRESS-7926867
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-FOLLOWREDIRECTS-2332181
Why? Has a fix available, CVSS 2.6
SNYK-JS-FOLLOWREDIRECTS-2396346
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
SNYK-JS-FOLLOWREDIRECTS-6141137
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5
SNYK-JS-FOLLOWREDIRECTS-6444610
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-HOSTEDGITINFO-1088355
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5
SNYK-JS-HTTPPROXY-569139
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
SNYK-JS-INI-1048974
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-JPEGJS-2859218
Why? Has a fix available, CVSS 5.9
SNYK-JS-JPEGJS-570039
Why? Has a fix available, CVSS 8.6
SNYK-JS-JSONSCHEMA-1920922
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
SNYK-JS-KINDOF-537849
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-LODASH-1018905
Why? Proof of Concept exploit, Has a fix available, CVSS 7.2
SNYK-JS-LODASH-1040724
Why? Proof of Concept exploit, Has a fix available, CVSS 8.2
SNYK-JS-LODASH-567746
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
SNYK-JS-LODASH-608086
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-LODASH-6139239
Why? Proof of Concept exploit, Has a fix available, CVSS 8.2
SNYK-JS-LODASHES-2434283
Why? Proof of Concept exploit, Has a fix available, CVSS 7.2
SNYK-JS-LODASHES-2434284
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
SNYK-JS-LODASHES-2434285
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-LODASHES-2434289
Why? Has a fix available, CVSS 5.3
SNYK-JS-MINIMATCH-3050818
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
SNYK-JS-MINIMIST-2429795
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6
SNYK-JS-MINIMIST-559764
Why? Has a fix available, CVSS 7.5
SNYK-JS-MOMENT-2440688
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-MOMENT-2944238
Why? Has a fix available, CVSS 6.5
SNYK-JS-NODEFETCH-2342118
Why? Has a fix available, CVSS 5.9
SNYK-JS-NODEFETCH-674311
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
SNYK-JS-OBJECTPATH-1017036
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6
SNYK-JS-OBJECTPATH-1569453
Why? Has a fix available, CVSS 7.3
SNYK-JS-OBJECTPATH-1585658
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-PATHPARSE-1077067
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.9
SNYK-JS-PATHTOREGEXP-7925106
Why? Has a fix available, CVSS 4.3
SNYK-JS-PHIN-6598077
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-POSTCSS-1090595
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-POSTCSS-1255640
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-QS-3153490
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5
SNYK-JS-REQUEST-3361831
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-SEMVER-3247795
Why? Proof of Concept exploit, Has a fix available, CVSS 8.8
SNYK-JS-SIMPLEGET-2361683
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-SOCKETIO-1024859
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-SOCKETIOPARSER-1056752
Why? Has a fix available, CVSS 9.8
SNYK-JS-SOCKETIOPARSER-3091012
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-SOCKJS-575261
Why? Has a fix available, CVSS 8.2
SNYK-JS-TAR-1536528
Why? Has a fix available, CVSS 8.2
SNYK-JS-TAR-1536531
Why? Has a fix available, CVSS 3.7
SNYK-JS-TAR-1536758
Why? Has a fix available, CVSS 8.5
SNYK-JS-TAR-1579147
Why? Has a fix available, CVSS 8.5
SNYK-JS-TAR-1579152
Why? Has a fix available, CVSS 8.5
SNYK-JS-TAR-1579155
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5
SNYK-JS-TOUGHCOOKIE-5672873
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-UAPARSERJS-1023599
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
SNYK-JS-UAPARSERJS-1072471
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-UAPARSERJS-610226
Why? Has a fix available, CVSS 5.3
SNYK-JS-URLPARSE-1078283
Why?
SNYK-JS-URLPARSE-1533425
Why?
SNYK-JS-URLPARSE-2401205
Why?
SNYK-JS-URLPARSE-2407759
Why?
SNYK-JS-URLPARSE-2407770
Why?
SNYK-JS-URLPARSE-2412697
Why?
SNYK-JS-URLREGEX-569472
Why?
SNYK-JS-WEBPACK-7840298
Why?
SNYK-JS-WEBSOCKETEXTENSIONS-570623
Why?
SNYK-JS-WS-1296835
Why?
SNYK-JS-WS-7266574
Why?
SNYK-JS-XML2JS-5414874
Why?
SNYK-JS-XMLHTTPREQUESTSSL-1082936
Why?
SNYK-JS-XMLHTTPREQUESTSSL-1255647
Why?
SNYK-JS-Y18N-1021887
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
npm:debug:20170905
Why? Has a fix available, CVSS 5.1
npm:mem:20180117
Why? Has a fix available, CVSS 7.5
npm:underscore.string:20170908
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Cryptographic Issues
🦉 More lessons are available in Snyk Learn