coder-newbie-advice
coder-newbie-advice copied to clipboard
[Snyk] Security upgrade gatsby from 2.0.76 to 2.13.79
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
169/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00045, Social Trends: No, Days since published: 8, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.81, Score Version: V5 |
Uncontrolled resource consumption SNYK-JS-BRACES-6838727 |
No | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gatsby
The new version differs by 250 commits.- 7884025 chore(release): Publish
- 816d475 fix: update dependency chokidar to v3 (#16975)
- 90ac3a5 chore(release): Publish
- 92df1cf fix(gatsby-plugin-feed): respect custom options and require title in config (#16814)
- efb0198 chore: update babel monorepo (#16977)
- d16474d fix(gatsby): update check for default exports (#16979)
- 043bebe fix: update gatsby monorepo (#16978)
- 42c1c5e chore: Set lerna concurrency on ci (#16973)
- a25bc27 docs: Add reddit link to Awesome Gatsby docs (#16982)
- 41d3e1c chore(gatsby-image): Clarify IntersectionObserver support in README.md (#16962)
- 7912336 chore(release): Publish
- f355bf8 Revert "chore: update babel monorepo" (#16976)
- 29d5e3c chore: update babel monorepo (#16929)
- 182407f chore: update react monorepo to ^16.9.0 (#16943)
- f7382ae feat(www): add code snippet with install command to starters (#16972)
- 3299192 chore: update dependency aws-sdk to ^2.516.0 (#16967)
- 7d2bf0d chore: update dependency flow-bin to ^0.106.0 (#16966)
- 5757af9 fix: update dependency theme-ui to ^0.2.36 (#16964)
- ebe6131 chore: update gatsby monorepo (#16950)
- 8b08b8c chore: Added my city to my creator description (#16955)
- d6bd515 fix: update minor updates in packages except react, babel and⦠(#16960)
- e9c8e8a chore(release): Publish
- 27d3efc chore(gatsby): Remove fallback for v8 serialize (#16958)
- 58ed3ca fix(gatsby): Remove deprecation warning from express-graphql (#16956)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
π§ View latest project report
π Read more about Snyk's upgrade and patch logic
Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.
Learn how to fix vulnerabilities with free interactive lessons: