thinx-device-api
thinx-device-api copied to clipboard
Published
20 hours ago •
suculent
suculent
[Snyk] Security upgrade @slack/rtm-api from 6.1.1 to 6.2.1
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1 |
Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459 |
No | Proof of Concept |
 |
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857 |
No | Proof of Concept |
|
661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Prototype Pollution SNYK-JS-AXIOS-6144788 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @slack/rtm-api
The new version differs by 44 commits.- 27b78e5 Publish patch versions of oauth, socket-mode and rtm-api to address downstream axios security vulns (#1721)
- 3f45b59 rtm-api, socket-mode, oauth: Bump web-api to latest v6.11.2 to address underlying axios security vulnerabilities (#1720)
- 725d662 web-api: Update axios to 1.6.5 (#1716)
- 3faa5b6 webhook: Bumping axios to 1.6.3 to resolve security vulnerability (#1712)
- 457ce38 Upgrade Axios web-api to 1.6.3 (#1710)
- b6dadd9 Publish `@ slack/[email protected]` (#1708)
- 0a44268 Add `code` property to `RichTextStyleable` (#1707)
- 4f39371 Add support for functions.* (complete) methods (#1702)
- b18a32b Publish `@ slack/[email protected]` (#1697)
- 62e4570 rtm-api: add support for custom webClient (#1696)
- 1312f62 Publish `@ slack/[email protected]` (#1691)
- 41f771e Add new `file_input` block kit element. (#1689)
- 7089a47 Add support for apps.manifest.* endpoints (#1690)
- f1d3be3 Add new args to admin.users.list and update web API response types (#1688)
- 9edb0f3 [email protected]. Also bump sinon dev dependency to latest version. (#1685)
- a74e35b feat: upgrade axios to resolve CVE-2023-45857 (#1682)
- 155293e web-api: Fix import and constructor naming conventions (#1683)
- a8b948d typo in types package README fix (#1678)
- c7c2f44 `npm link` up the packages in this repo during CI (#1672)
- 5c52029 added the config lookup and set method implementation (#1676)
- 4a8eeac web-api: Remove warning from `chat.update` (#1674)
- 6e8a31e @ slack/web-api: prep for next major release. bump min node to v18 (#1667)
- 1374422 Add deprecation comment
- 7857f26 Update files.upload.v2 internals due to server-side improvements
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Cross-site Request Forgery (CSRF) 🦉 Regular Expression Denial of Service (ReDoS) 🦉 Prototype Pollution
