fe-code icon indicating copy to clipboard operation
fe-code copied to clipboard

[Snyk] Upgrade jest from 27.0.6 to 27.5.1

Open snyk-bot opened this issue 2 years ago • 0 comments

Snyk has created this PR to upgrade jest from 27.0.6 to 27.5.1.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 20 versions ahead of your current version.
  • The recommended version was released 6 months ago, on 2022-02-08.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Reverse Tabnabbing
SNYK-JS-ISTANBULREPORTS-2328088
215/1000
Why? CVSS 4.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

snyk-bot avatar Aug 12 '22 23:08 snyk-bot

Same here. Windows 10, Google Chrome 78.0.3904.108 (Official Build) (64-bit) Dropbox works fine, Google Drive loading forever.

I assume this is related: https://github.com/brave/brave-browser/issues/3120

ronenteva avatar Dec 03 '19 18:12 ronenteva

Google Drive is broken at the moment and it can't be fixed easily. Use this guide to migrate your Password manager file from Google Drive to Dropbox: https://wiki.trezor.io/User_manual:Password_Manager#Migrate_the_passwords_to_another_service

prusnak avatar Dec 03 '19 18:12 prusnak

I have a question, if someone is taking care about this issue. You know what, the ability to use the Google account was strong argument for me to buy Trezor. I don't want to create another account. Why wasn't the information about the fact that the signing with Google account doesn't work on the page? Is there some roadplan when it will be fixed?

LBednar avatar Jan 12 '20 14:01 LBednar

@prusnak Do you know if git cloning the chrome extension and using my own OAuth client ID would be a workaround?

Same main question as @LBednar to trezor.io staff: are you planning on fixing the issue? Or removing Google Drive login from the official extension? This broken functionality does not look good: "Sign in with Google temporarily disabled for this app. This app has not been verified yet by Google in order to use Google Sign In."... especially when your core business is trust.

Personally I would prefer Nextcloud support altogether - for wallet labeling and password manager.

bytegold avatar Oct 27 '20 21:10 bytegold

We'll be moving the Password Manager to our new app called Trezor Suite - see https://blog.trezor.io/introducing-trezor-suite-public-beta-7c5949aeef45

This will eventually address all the issues you mention.

prusnak avatar Oct 28 '20 08:10 prusnak

@prusnak Thank you so much for replying quickly. Then I'll just wait for the integration and ignore the password manager for now.

bytegold avatar Oct 28 '20 08:10 bytegold

After months of no problems, I am now having this problem as well. Is there a timeline of integration with Trezor Suite?

craymichael avatar Mar 18 '21 20:03 craymichael

We'll be moving the Password Manager to our new app called Trezor Suite - see https://blog.trezor.io/introducing-trezor-suite-public-beta-7c5949aeef45

This will eventually address all the issues you mention.

Just a question @prusnak, where does the Trezor Suit store these passwords then? If it's locally a cloud based backup is still needed in case of a local hazard.

VictorieeMan avatar Apr 03 '21 11:04 VictorieeMan

Hello @prusnak ,

One year passed - Is there any news with TPM? There is still no password manager functionality in Trezor Suite...

susanin-ivan avatar Nov 27 '21 07:11 susanin-ivan