[Snyk] Security upgrade @braintree/sanitize-url from 6.0.0 to 6.0.1

Open grubyak opened this issue 2 years ago • 2 comments

trafficstars

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	556/1000 Why? Recently disclosed, Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) SNYK-JS-BRAINTREESANITIZEURL-3330766	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @braintree/sanitize-url

The new version differs by 6 commits.

ab8d43d 6.0.1
768e954 chore: update version in changelog
d4bdc89 Fix html entity tab (#45)
b70161d chore: fix CHANGELOG formatting
eb4a764 chore: update dev dependencies
071dbfb chore: update dependencies

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

Feb 24 '23 19:02 grubyak

Codecov Report

Merging #147 (3f58da8) into master (c1ec51b) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #147   +/-   ##
=======================================
  Coverage   98.87%   98.87%           
=======================================
  Files          14       14           
  Lines         178      178           
  Branches       76       76           
=======================================
  Hits          176      176           
  Misses          2        2

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more