codesandbox-client
codesandbox-client copied to clipboard
Published
20 hours ago •
codesandbox
codesandbox
[Snyk] Fix for 2 vulnerabilities
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- packages/app/package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Uncontrolled resource consumption SNYK-JS-BRACES-6838727 |
Yes | No Known Exploit |
|
661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gulp
The new version differs by 45 commits.- 5c4c547 chore: Release 5.0.0 (#2762)
- bf72116 chore: Add index.mjs to files list
- b00de68 feat: Provide an ESM export (#2760)
- 72668c6 chore!: Normalize repository, dropping node <10.13 support (#2758)
- 85896d4 chore(docs): Update stream handbook link (#2711)
- 818bd73 Docs: Remove gulp-sourcemaps because it is built-in (#2592)
- 598f971 Docs: Fix broken link in recipe (#2571)
- 9877de0 Docs: Guide CustomRegistries to maintain properties on tasks (fixes #2561) (#2565)
- f91c388 Docs: Remove typo in custom registry docs (#2543)
- df25250 Docs: Fix typo in task docs (#2524)
- b6d6d7c Docs: fix recipe link (#2526)
- c26ebcb Docs: Cleanup registry error message subtitles
- d51c6eb Docs: Rename the automate releases recipe file
- 4c1bead Docs: Add subtitles for registry error messages (#2502)
- 6e56ed8 Docs: Update and refactor release workflow recipe (#2498)
- 131b702 Docs: Remove recipe for using a config file
- c5ff7e0 Docs: Remove recipe for splitting tasks in files
- 147327c Docs: Remove recipe for specifying a CWD
- 1a653a9 Docs: Remove recipe for running shell commands
- e1190ea Docs: Remove recipe for exporting tasks
- c4305df Docs: Remove recipe for running tasks in series
- 486f927 Docs: Remove recipes for selecting changed files
- b7b70b8 Docs: Fix some links
- 93564bd Docs: Add advanced section for creation of custom registries (#2479)
Package name: jest-each
The new version differs by 22 commits.- ff9269b chore: bump most dated deps (#8850)
- 7594141 chore: upgrade to eslint@6 (#8855)
- b33ce0d chore: upgrade to micromatch v4 (#8852)
- d6ff72a chore: add node 12 to CI (#8411)
- 7e9b4ea chore: upgrade jsdom (#8851)
- 4bb7a2d Use `weak-napi` instead of `weak` in `jest-leak-detector`
- ce47c6c Get rid of Node 6 support (#8455)
- bc5c3c7 jest-snapshot: Remove only the added newlines in multiline snapshots (#8859)
- d523fa8 bug.md: highlights placeholder should be removed (#8836)
- 08f109c expect: Display expectedDiff more carefully in toBeCloseTo (#8389)
- b09de2d chore: bump node-notifier for node v6 support
- 557a39f fix(linter): Fix linting failure introduced in #8847 😓 (#8849)
- 012472b fix(docs): Update broken links in docs. (#8847)
- ee2bea1 chore: sort member in imports (#8846)
- 9ba4594 add Chinese Jest work with AngularJS tutorial (#8828)
- 0e5b363 chore: reduce reliance on esModuleInterop (#8842)
- d69f8d3 getTimerCount will not include cancelled immediates (#8764)
- b4bd77b Fix grammar: "your jest's config"->"your Jest..." (#8843)
- 54b3dcf Fix grammar: "a known issues"->"a known issue" (#8844)
- e76c7da docs: update matchMedia methods (#8835)
- 23b9860 chore: roll new version of docs
- 3cdbd55 Release 24.9.0
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Uncontrolled resource consumption
