react-native-in-app-review
react-native-in-app-review copied to clipboard
[Snyk] Security upgrade react-native from 0.66.3 to 0.73.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- Example/package.json
- Example/package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908 |
No | Proof of Concept |
![]() |
696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5 |
Prototype Pollution SNYK-JS-ASYNC-2441827 |
No | Proof of Concept |
![]() |
786/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.3 |
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462 |
No | Proof of Concept |
![]() |
696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5 |
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970 |
No | Proof of Concept |
![]() |
641/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.4 |
Prototype Pollution SNYK-JS-JSON5-3182856 |
No | Proof of Concept |
![]() |
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905 |
No | Proof of Concept |
![]() |
681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2 |
Command Injection SNYK-JS-LODASH-1040724 |
No | Proof of Concept |
![]() |
479/1000 Why? Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818 |
No | No Known Exploit |
![]() |
506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7 |
Prototype Pollution SNYK-JS-MINIMIST-2429795 |
No | Proof of Concept |
![]() |
539/1000 Why? Has a fix available, CVSS 6.5 |
Information Exposure SNYK-JS-NODEFETCH-2342118 |
No | No Known Exploit |
![]() |
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-PROMPTS-1729737 |
No | Proof of Concept |
![]() |
646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5 |
Improper Authorization SNYK-JS-REACTDEVTOOLSCORE-6023999 |
No | Proof of Concept |
![]() |
696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795 |
No | Proof of Concept |
![]() |
619/1000 Why? Has a fix available, CVSS 8.1 |
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506 |
No | No Known Exploit |
![]() |
489/1000 Why? Has a fix available, CVSS 5.5 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-SIDEWAYFORMULA-3317169 |
No | No Known Exploit |
![]() |
601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6 |
Prototype Pollution SNYK-JS-SIMPLEPLIST-2413671 |
No | Proof of Concept |
![]() |
696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-TMPL-1583443 |
No | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: react-native
The new version differs by 250 commits.- 1eb4bf0 [0.73.0] Bump version numbers
- 6a4b434 [0.73.0-rc.8] Bump version numbers
- 0b3a811 Revert D49509633: Multisect successfully blamed "D49509633: [react-native][PR] fix: Text cut off issues when adjusting text size and font weight in system settings" for test or build failures
- d2517af Update Podfile.lock
- bb989e9 [0.73.0-rc.7] Bump version numbers
- d97e8e6 Update Podfile.lock
- cd43de6 Fix android root view group removal during instance re-creation (#41678)
- 0d5e678 [0.73.0-rc.6] Bump version numbers
- 61867e2 Bump package versions
- dcdea80 Fix `build_codegen!` not finding `@ react-native/codegen` in pnpm setups (#41399)
- c32064c Correctly declare runtime dependencies
- e03137e Bump package versions
- f3f75e8 Fix projects being broken on dependencies starting with `a..` (#41621)
- 830c2e7 [RN][iOS] Fix React-ImageManager dependencies
- 9dfb0ff Revert "RNTester-ios / RCTAppDelegate > correctly check for USE_HERMES Flag (#41573)"
- 3bb7a70 [LOCAL] Update Podfile.lock
- 154a81a FP Tolerance in iOS Paper SafeAreaView debouncing (#41614)
- a66cda9 Remove "Open Debugger" action under JSC (#41535)
- 02a411e RNTester-ios / RCTAppDelegate > correctly check for USE_HERMES Flag (#41573)
- 3da0959 Update CLI to v12.1.1
- 4cd4b39 [0.73.0-rc.5] Bump version numbers
- 2896a57 bumped packages versions
- 5a3bcea Update podfile.lock
- 3efabb6 bumped packages versions
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS) 🦉 Prototype Pollution 🦉 Command Injection