cloudboost icon indicating copy to clipboard operation
cloudboost copied to clipboard

[Snyk] Fix for 1 vulnerabilities

Open nawazdhandala opened this issue 3 years ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • dashboard-ui/package.json
    • dashboard-ui/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: chart.js The new version differs by 58 commits.
  • 98f104c Release 2.7.2
  • 1a5dca8 Merge pull request #5145 from chartjs/master
  • ac088a0 Bump version to 2.7.2 (#5307)
  • c2a5b12 Bugfix: Improve polyfill function of log10 to return whole powers of 10 (#5275)
  • c90cf2e Make both README.md and installation.md clearer (#5274)
  • be6660c Improve title of generated documentation (#5256)
  • d6ce5c0 Support multiple font colors for radial chart labels (#5240)
  • 584d1c6 Fix label vertical alignment on vertical scales (#5248)
  • bba29e5 Remove trailing spaces from docs (#5227)
  • 182270e Setup HTML and JS linters for samples (#5195)
  • 97ff458 Add Charba GWT integration to extensions.md (#5225)
  • c268185 Fix Slack invitation link (#5217)
  • e61392a Don't draw tick across axis/border (#5178)
  • 98ef394 Fix variable name error on developer api documentation for (#5173)
  • 274fca6 Update custom tooltip documentation and samples (#5166)
  • f82c8ad Remove copy-pasta error in polar area and doughnut chart docs (#5169)
  • d668882 Tooltip label callback example (#5168)
  • 9a0117a Responsive printing docs (#5167)
  • 26c44cf Treat negative values in doughnut charts as positive (#5165)
  • 6d58a6a Add tests related to showLines for controller.scatter (#5150)
  • e585c75 Log gulp error to Chart.js (#5143)
  • 37ec838 Format the label in the time scale tooltip (#5095)
  • 2d7f0a4 Fix updating plugin options (#5144)
  • 2f5a3e1 Ignore package-lock.json (#5138)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

nawazdhandala avatar Jul 08 '22 05:07 nawazdhandala