[Snyk] Fix for 2 vulnerabilities

Open nawazdhandala opened this issue 1 year ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- accounts-ui/package.json
- accounts-ui/package-lock.json

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	Yes	Proof of Concept
	763/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.4	Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: webpack

The new version differs by 250 commits.

4be093d 2.2.0
2278469 2.2.0-rc.8
b946eb4 Merge pull request #3988 from malstoun/bug/2664
260e413 Merge pull request #3986 from webpack/bugfix/revert_use_of_buffer_dot_from
0ec7de9 Fix regression with watch cli opt, add tests for this case
72226db add missing disable line
4d30675 build fresh yarn.lock file to remove buffer polyfill
91c1f35 fix(node): rollback changes of Buffer.from to new Buffer() and bump down travis to 4.3 min node v
0b47602 2.2.0-rc.7
db6ccbc Merge pull request #3978 from webpack/bugfix/conditional-reexports
82a5b03 Merge pull request #3977 from malstoun/bug/2664
fc1a43b Merge pull request #3976 from timse/rely-on-defaults
a44694a hoist exports declarations too
682bde8 Fix lint
c6d7d90 Add tests
af8d49e remove defaults values to shave a few bytes
9796696 2.2.0-rc.6
e9bdb05 Merge pull request #3971 from webpack/bugfix/fix_available_vars_in_fmtp
bd45bdc add test case for global in harmony modules
bfccb20 fix PR
5a3a23f fix(nmf): Fix exports for var injection to include free glob exports or arguments
437dce4 2.2.0-rc.5
91cb1df Merge pull request #3970 from webpack/ci/appveyor
9fd55e5 Merge pull request #3969 from webpack/bugfix/issue-3964

Package name: webpack-dev-server

The new version differs by 250 commits.

c9271b9 chore(release): 4.0.0
18bf369 test: fix stability (#3676)
cdcabb2 fix: respect protocol from browser for manual setup (#3675)
1768d6b fix: initial reloading for lazy compilation (#3662)
4f5bab1 docs: improve examples (#3672)
f2d87fb fix: improve https CLI output (#3673)
0277c5e chore: remove redundant console statements (#3671)
16fcdbc docs: add `ipc` example (#3667)
8915fb8 test: add e2e tests for built in routes (#3669)
4d1cbe1 docs: ask `version` information in issue template (#3668)
b6c1881 chore(deps-dev): bump core-js from 3.16.1 to 3.16.2 (#3666)
ffa8cc5 chore(deps-dev): bump supertest from 6.1.5 to 6.1.6 (#3665)
f1fdaa7 chore(release): 4.0.0-rc.1
c4678bc fix: legacy API (#3660)
d8bdd03 test: fix stability (#3661)
22b1414 refactor: remove `killable` (#3657)
75bafbf test: add e2e tests for module federation (#3658)
493ccbd chore(deps): update `ws` (#3652)
ae8c523 test: add e2e test for universal compiler (#3656)
f94b84f chore(deps): update (#3655)
1923132 test: fix cli
2adfd01 test: fix todo (#3653)
6e2cbde fix: proxy logging and allow to pass options without the `target` option (#3651)
c9ccc96 fix: respect infastructureLogging.level for client.logging (#3613)

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

Learn how to fix vulnerabilities with free interactive lessons:

Mar 22 '24 17:03 nawazdhandala