storybook-state icon indicating copy to clipboard operation
storybook-state copied to clipboard

[Snyk] Security upgrade @storybook/react from 5.3.14 to 6.1.20

Open Sambego opened this issue 4 years ago • 0 comments

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 479/1000
Why? Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @storybook/react The new version differs by 250 commits.
  • d09748c v6.1.20
  • bb90a86 Update root, peer deps, version.ts/json to 6.1.20
  • c6ec784 6.1.20 changelog
  • 0ff4c31 Merge pull request #14019 from storybookjs/chore_vue3_snippets_and_assorted_adjustments
  • 7b8009d Merge pull request #14015 from phated/phated/update-react-dev-utils
  • e15a2e1 6.1.19 latest.json version file
  • 45a5540 Update git head to 6.1.19
  • 79b72d3 v6.1.19
  • 978aed2 Update root, peer deps, version.ts/json to 6.1.19
  • c891cab 6.1.19 changelog
  • 7b98271 Merge pull request #13991 from storybookjs/fix/13830-add-missing-dep
  • d85bd6a Merge pull request #13998 from storybookjs/13709--fix-typo
  • daf69ba Merge pull request #13680 from semihraifgurel/next
  • 4f83e49 Merge pull request #13968 from oscard0m/patch-1
  • 9a7ec62 Merge pull request #13591 from crixx/chore/#13590-update-docs
  • e12db32 Merge pull request #13945 from storybookjs/add-audi-docs
  • 1faf457 Merge pull request #13746 from ka2jun8/patch-1
  • afdac39 Merge pull request #13910 from storybookjs/13039-improve-hoisted-snippet
  • 8692248 Merge pull request #13758 from qoalu/patch-4
  • 0762248 fix(component): add missing `regenerator-runtime` dependency
  • fdf7167 6.1.18 latest.json version file
  • d7150cf Update git head to 6.1.18
  • 7b49fc1 v6.1.18
  • ad47dce Update root, peer deps, version.ts/json to 6.1.18

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sambego avatar Mar 07 '21 23:03 Sambego