react-native-share-pdf icon indicating copy to clipboard operation
react-native-share-pdf copied to clipboard

[Snyk] Security upgrade react-native from 0.58.3 to 0.58.4

Open MadeinFrance opened this issue 1 year ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • demo/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 718/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5
Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: react-native The new version differs by 13 commits.
  • de90192 [0.58.4] Bump version numbers
  • 6436157 Revert "[0.58.4] Bump version numbers"
  • 5e87547 fix incorrect type which makes animated gifs not loop forever on device (#22987)
  • 0bb1ba8 Two more paths
  • 4a57276 Invalidade Gradle cache
  • 8bddcb6 Backport fix from https://github.com/react-native-community/react-native-cli/pull/138
  • 98bcfe0 Merge pull request #23293 from osunnarvik/parse_simulator_list
  • 9a8c959 handles simulator where prefix is included
  • 6c83945 [0.58.4] Bump version numbers
  • 2781ef0 Android: Add error description to Image onError callback (#22737)
  • c3bd341 Fix Native Rotation Android (#18872)
  • e1694ee bump soloader to 0.6.0 (#23239)
  • 6943b2e Remove jest and jest-junit from runtime dependencies (#23276)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

MadeinFrance avatar Jul 16 '23 15:07 MadeinFrance