Skip to content

[Snyk] Fix for 1 vulnerabilities - #43

Open
snyk-bot wants to merge 1 commit into
6.0-docsfrom
snyk-fix-87b2c58ec92e3f3cf06dc2087563858c
Open

[Snyk] Fix for 1 vulnerabilities#43
snyk-bot wants to merge 1 commit into
6.0-docsfrom
snyk-fix-87b2c58ec92e3f3cf06dc2087563858c

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • lib/core/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 691/1000
Why? Recently disclosed, Has a fix available, CVSS 8.1
Prototype Pollution
SNYK-JS-CACHEBASE-1054631
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: fork-ts-checker-webpack-plugin The new version differs by 28 commits.
  • 5ba6839 Release 5.0.0 (#445)
  • d056616 feat: remove "incremental: true" from ts default options (#444)
  • 188d44d feat: add issue.scope option (#442)
  • b865f1d fix: always pass compilation to issues hook (#443)
  • e812f18 feat: overwrite other fields in tsconfig.json (#440)
  • 2b72fd0 fix: properly disconnect rpc client to be able to reconnect (#439)
  • c4796b2 fix: include files that are outside project context (#437)
  • 1f7ae0d docs: update bug-report template by merging master into alpha branch
  • aa8f74d feat: rename tsconfig option to configFile for consistency (#436)
  • 944e0c9 feat: improve overall typescript performance (#435)
  • a430979 feat: add `context` option for typescript reporter (#430)
  • 503a948 fix: support webpack multi-compiler (#431)
  • 9b3b9dd feat: add "mode" for typescript reporter (#429)
  • 2ba396d fix: respect eslint extensions in incremental check
  • 8a10ca9 docs: add babel-loader example
  • be9cd64 docs: add ts-loader example
  • b5d5977 docs: add vscode-tasks example
  • e59a8d2 chore: fix github actions release job
  • 37b8944 feat: export `version` const for external tools (#428)
  • 5665dac feat: change start hook to AsyncSeriesWaterfallHook (#425)
  • 8687c63 feat: support @ vue/compiler-sfc in the vue extension (#423)
  • f277444 fix: remove references to external typings (#422)
  • cfcc0fe fix: properly handle import modules with .vue suffix (#420)
  • 1ff3ce4 fix: handle absolute paths for the eslint.files option (#419)

See the full diff

Package name: webpack The new version differs by 250 commits.
  • 610f368 5.0.0
  • 5ce65c1 update examples
  • bbe1230 Merge pull request #11628 from webpack/bugfix/real-content-hash
  • 75ecff2 5.0.0-rc.6
  • bfc35d6 Merge pull request #11603 from MayaWolf/master
  • 76e8cbd Merge pull request #11622 from webpack/dependabot/npm_and_yarn/types/node-13.13.25
  • 9fd1be2 chore(deps-dev): bump @ types/node from 13.13.23 to 13.13.25
  • 36bcfaa Merge pull request #11621 from webpack/bugfix/11619
  • 9130d10 fix called variables with ProvidePlugin
  • 3e42105 Merge pull request #11620 from webpack/bugfix/11617
  • 4709719 skip connections copied to concatenated module
  • 57b493f 5.0.0-rc.5
  • 1658e2f Merge pull request #11618 from webpack/bugfix/11615
  • a8fb45d fixes crash in SideEffectsFlagPlugin
  • 84b196d emit error instead of crashing when unexpected problem occurs
  • 5573fed Merge pull request #11601 from Hornwitser/improve-suggested-polyfill-config
  • 9b5cce9 Merge pull request #11609 from snitin315/export-types
  • 37c495c export type RuleSetUseItem
  • 39faf34 export type RuleSetUse
  • e5fd246 export type RuleSetConditionAbsolute
  • 660baad export RuleSetCondition types
  • 13e3ca5 Merge pull request #11602 from webpack/bugfix/shared-runtime-chunk
  • 9c0587e Merge pull request #11606 from webpack/dependabot/npm_and_yarn/simple-git-2.21.0
  • 502d166 Merge pull request #11607 from webpack/dependabot/npm_and_yarn/acorn-8.0.4

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant