transformimgs icon indicating copy to clipboard operation
transformimgs copied to clipboard

[Snyk] Security upgrade swagger-ui from 5.11.0 to 5.12.1

Open dooman87 opened this issue 10 months ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • misc/swagger-ui/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Template Injection
SNYK-JS-DOMPURIFY-6474511
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: swagger-ui The new version differs by 171 commits.
  • b2e673d fix(try-it-out): fix issues related to building requests from parameters (#9746)
  • 8225cfd chore(deps-dev): bump @ babel/cli from 7.23.9 to 7.24.1 (#9743)
  • 357dff3 chore(deps-dev): bump autoprefixer from 10.4.18 to 10.4.19 (#9742)
  • 0dc3c7c chore(deps): bump dompurify from 3.0.10 to 3.0.11 (#9741)
  • bf65c4e chore(deps-dev): bump cssnano from 6.1.0 to 6.1.1 (#9737)
  • 9694620 chore(deps-dev): bump cypress from 13.7.0 to 13.7.1 (#9735)
  • ec4e982 chore(deps): bump @ braintree/sanitize-url from 7.0.0 to 7.0.1 (#9736)
  • a2fdae9 chore(deps-dev): bump webpack from 5.90.3 to 5.91.0 (#9726)
  • b928c09 chore(deps-dev): bump express from 4.18.3 to 4.19.1 (#9727)
  • 99724a1 chore(deps-dev): bump @ commitlint/cli from 19.2.0 to 19.2.1 (#9725)
  • 7c4fa83 chore(deps-dev): bump webpack-dev-server from 5.0.3 to 5.0.4 (#9719)
  • b3fb525 chore(deps-dev): bump @ babel/preset-react from 7.23.3 to 7.24.1 (#9721)
  • 8edca10 chore(deps): bump dompurify from 3.0.9 to 3.0.10 (#9720)
  • 6bb810a chore(deps-dev): bump @ babel/core from 7.24.0 to 7.24.1 (#9715)
  • a2daeda chore(deps-dev): bump @ babel/plugin-transform-runtime (#9716)
  • ac4c853 chore(deps-dev): bump @ babel/eslint-parser from 7.23.10 to 7.24.1 (#9714)
  • f91ca82 chore(deps-dev): bump eslint-plugin-react from 7.34.0 to 7.34.1 (#9707)
  • 24c0165 chore(deps-dev): bump postcss from 8.4.35 to 8.4.36 (#9708)
  • b4b42ac chore(deps-dev): bump postcss-preset-env from 9.5.1 to 9.5.2 (#9706)
  • 95feee2 chore(deps-dev): bump @ commitlint/cli from 19.1.0 to 19.2.0 (#9701)
  • 37e2c27 chore(deps): bump follow-redirects from 1.15.4 to 1.15.6 (#9704)
  • cebccaa chore(deps-dev): bump postcss-preset-env from 9.5.0 to 9.5.1 (#9695)
  • 49a73c5 chore(deps-dev): bump cypress from 13.6.6 to 13.7.0 (#9697)
  • 7c4d0fb chore(deps-dev): bump sass from 1.71.1 to 1.72.0 (#9696)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

dooman87 avatar Apr 14 '24 22:04 dooman87