[Snyk] Security upgrade firebase-admin from 10.1.0 to 13.0.0 by snyk-io[bot] · Pull Request #37 · Hawthorne001/quickstart-cpp

snyk-io · 2024-12-01T11:49:14Z

Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

functions/testapp/functions/package.json
functions/testapp/functions/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Denial of Service (DoS) SNYK-JS-DICER-2311764
	Uncontrolled Resource Consumption SNYK-JS-GRPCGRPCJS-7242922
	Prototype Pollution SNYK-JS-PROTOBUFJS-5756498

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Prototype Pollution

Snyk has created this PR to upgrade firebase-admin from 5.10.0 to 5.13.1. See this package in npm: https://www.npmjs.com/package/firebase-admin See this project in Snyk: https://app.snyk.io/org/hawthorne001/project/6cb08067-7e0f-4511-9766-bfe74f81f1eb?utm_source=github&utm_medium=referral&page=upgrade-pr

…e0897c78dd9718bc3 [Snyk] Upgrade firebase-admin from 5.10.0 to 5.13.1

…ctions/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6671926

…2993102f21ffd [Snyk] Security upgrade firebase-admin from 5.13.1 to 10.1.0

…ctions/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-DICER-2311764 - https://snyk.io/vuln/SNYK-JS-GRPCGRPCJS-7242922 - https://snyk.io/vuln/SNYK-JS-PROTOBUFJS-5756498

socket-security · 2024-12-01T11:49:36Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@firebase/app-check-interop-types@0.3.3	None	`0`	2.9 kB	google-wombot
npm/@firebase/app-types@0.9.3	None	`0`	9.56 kB	chholland, feiyang.chen, firebase-ops, ...1 more
npm/@firebase/auth-interop-types@0.2.4	None	`0`	1.97 kB	chholland, feiyang.chen, firebase-ops, ...1 more
npm/@firebase/component@0.6.11	None	`0`	119 kB	google-wombot
npm/@firebase/database-compat@2.0.1	None	`0`	2.28 MB	chholland, feiyang.chen, firebase-ops, ...1 more
npm/@firebase/database-types@1.0.7	None	`0`	6.26 kB	chholland, feiyang.chen, firebase-ops, ...1 more
npm/@firebase/database@1.0.10	None	`0`	8.7 MB	chholland, feiyang.chen, firebase-ops, ...1 more
npm/@firebase/logger@0.4.4	None	`0`	54.8 kB	google-wombot
npm/@firebase/util@1.10.2	None	`0`	934 kB	google-wombot
npm/@google-cloud/firestore@7.10.0	None	`0`	5.52 MB	google-wombot
npm/@google-cloud/paginator@5.0.2	None	`0`	50.9 kB	google-wombot
npm/@google-cloud/projectify@4.0.0	None	`0`	32 kB	google-wombot
npm/@google-cloud/promisify@4.0.0	None	`0`	36.5 kB	google-wombot
npm/@google-cloud/storage@7.14.0	None	`+1`	1.68 MB	google-wombot
npm/@grpc/grpc-js@1.12.2	environment, filesystem, network	`0`	1.94 MB	murgatroid99
npm/@js-sdsl/ordered-map@4.4.2	None	`0`	400 kB	yaozilong
npm/@opentelemetry/api@1.9.0	None	`0`	1.22 MB	pichlermarc
npm/@types/caseless@0.12.5	None	`0`	4.72 kB	types
npm/@types/request@2.48.12	None	`0`	19.8 kB	types
npm/@types/tough-cookie@4.0.5	None	`0`	13.5 kB	types
npm/agent-base@7.1.1	network	`0`	31.2 kB	tootallnate
npm/asynckit@0.4.0	None	`0`	27.4 kB	alexindigo
npm/combined-stream@1.0.8	None	`0`	11.5 kB	alexindigo
npm/delayed-stream@1.0.0	None	`0`	8.02 kB	apechimp
npm/farmhash-modern@1.1.0	filesystem	`0`	117 kB	forbeslindesay
npm/fast-xml-parser@4.5.0	None	`0`	174 kB	amitgupta
npm/firebase-admin@13.0.0	environment, filesystem, network	`0`	1.34 MB	google-wombot
npm/form-data@2.5.2	filesystem, network	`+1`	62.1 kB	ljharb
npm/gaxios@6.7.1	environment, network	`0`	115 kB	google-wombot
npm/gcp-metadata@6.1.0	environment, filesystem	`0`	81.3 kB	google-wombot
npm/google-auth-library@9.15.0	None	`0`	516 kB	google-wombot
npm/google-gax@4.4.1	environment, filesystem, network, shell	`+1`	3.41 MB	google-wombot
npm/gtoken@7.1.0	filesystem	`+2`	72.8 kB	google-wombot
npm/html-entities@2.5.2	None	`0`	287 kB	mdevils
npm/https-proxy-agent@7.0.5	network	`0`	34.9 kB	tootallnate
npm/jose@4.15.9	network	`0`	549 kB	panva
npm/jsonwebtoken@9.0.2	None	`0`	43.5 kB	charlesrea
npm/jwks-rsa@3.1.0	network	`+1`	41.9 kB	auth0-oss
npm/proto3-json-serializer@2.0.2	None	`0`	87.9 kB	google-wombot
npm/retry-request@7.0.2	environment	`0`	20.6 kB	google-wombot
npm/semver@7.6.3	None	`0`	95.8 kB	npm-cli-ops
npm/strnum@1.0.5	None	`0`	17.7 kB	amitgupta
npm/teeny-request@9.0.0	environment, network	`+2`	127 kB	google-wombot
npm/uuid@11.0.3	None	`0`	294 kB	broofa

🚮 Removed packages: npm/@firebase/auth-interop-types@0.1.6, npm/@firebase/component@0.5.13, npm/@firebase/database-compat@0.1.8, npm/@firebase/database-types@0.9.17, npm/@firebase/database@0.12.8, npm/@firebase/logger@0.3.2, npm/@firebase/util@1.5.2, npm/@google-cloud/firestore@4.15.1, npm/@google-cloud/paginator@3.0.7, npm/@google-cloud/projectify@2.1.1, npm/@google-cloud/promisify@2.0.4, npm/@google-cloud/storage@5.20.5, npm/@grpc/grpc-js@1.6.12, npm/@grpc/proto-loader@0.6.13, npm/@panva/asn1.js@1.0.0, npm/cliui@7.0.4, npm/compressible@2.0.18, npm/configstore@5.0.1, npm/crypto-random-string@2.0.0, npm/dicer@0.3.1, npm/dot-prop@5.3.0, npm/ent@2.2.1, npm/fast-text-encoding@1.0.6, npm/firebase-admin@10.1.0, npm/gaxios@4.3.3, npm/gcp-metadata@4.3.1, npm/google-auth-library@7.14.1, npm/google-gax@2.30.5, npm/google-p12-pem@3.1.4, npm/graceful-fs@4.2.11, npm/gtoken@5.3.2, npm/hash-stream-validation@0.2.4, npm/imurmurhash@0.1.4, npm/is-obj@2.0.0, npm/is-stream-ended@0.1.4, npm/is-typedarray@1.0.0, npm/jose@2.0.7, npm/jsonwebtoken@8.5.1, npm/jwks-rsa@2.1.5, npm/long@4.0.0, npm/make-dir@3.1.0, npm/proto3-json-serializer@0.1.9, npm/protobufjs@6.11.4, npm/pump@3.0.2, npm/pumpify@2.0.1, npm/punycode@1.4.1, npm/retry-request@4.2.2, npm/semver@5.7.2, npm/signal-exit@3.0.7, npm/streamsearch@1.1.0, npm/teeny-request@7.2.0, npm/typedarray-to-buffer@3.1.5, npm/unique-string@2.0.0, npm/write-file-atomic@3.0.3, npm/xdg-basedir@4.0.0, npm/yargs-parser@20.2.9, npm/yargs@16.2.0

View full report↗︎

Hawthorne001 and others added 9 commits February 20, 2024 13:49

Create cmake-single-platform.yml

42c80b1

Create msbuild.yml

37e4846

Create c-cpp.yml

3120694

Merge pull request #27 from Hawthorne001/snyk-upgrade-5036a15392c1236…

62c091c

…e0897c78dd9718bc3 [Snyk] Upgrade firebase-admin from 5.10.0 to 5.13.1

Merge branch 'main' into main

22439e8

fix: functions/testapp/functions/package.json & functions/testapp/fun…

3b66ae7

…ctions/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6671926

Merge pull request #35 from Hawthorne001/snyk-fix-e67a4f8d050dd0bd896…

382485f

…2993102f21ffd [Snyk] Security upgrade firebase-admin from 5.13.1 to 10.1.0

pull bot force-pushed the main branch from 382485f to d3e92f6 Compare July 15, 2025 03:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Security upgrade firebase-admin from 10.1.0 to 13.0.0#37

[Snyk] Security upgrade firebase-admin from 10.1.0 to 13.0.0#37
snyk-io[bot] wants to merge 9 commits intomainfrom
snyk-fix-0e4fc077acc15510dbf62cd42ea57ca0

snyk-io bot commented Dec 1, 2024

Uh oh!

socket-security bot commented Dec 1, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

snyk-io bot commented Dec 1, 2024

Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

Uh oh!

socket-security bot commented Dec 1, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants