light icon indicating copy to clipboard operation
light copied to clipboard

[Snyk] Fix for 1 vulnerabilities

Open nahtnam opened this issue 2 years ago • 3 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • website/package.json
    • website/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 713/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.4
Prototype Pollution
SNYK-JS-JSON5-3182856
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @docusaurus/core The new version differs by 250 commits.
  • 2a9e8f5 v2.0.0
  • 2ef40c2 chore: Netlify branch deploys should only deploy default locale "en" (#7788)
  • d88f248 chore: add Netlify config for major version branch deploys (docusaurus-v2 branch) (#7787)
  • e4fc47b Merge branch 'main' into docusaurus-v2
  • 7f40350 chore: fix codesandbox playgrounds, use Node.js 16 version (#7784)
  • 1065e55 refactor(core): log Docusaurus & Node version before exiting (#7781)
  • 965a01e chore: port-2.0.0-rc.1 (#7782)
  • e78a15e chore: ci tests should run on version branches "docusaurus-vX" (#7783)
  • c751bc6 chore: regen v2.0.0-rc.1 examples (#7780)
  • d255389 chore: prepare v2.0.0-rc.1 release (#7778)
  • 443914a docs: add Bruce Wiki website to showcase (#7770)
  • f913af0 docs: release process, versioning, breaking changes, public API surface (#7706)
  • 9788944 refactor(theme): fix duplicate page metadata usage (#7777)
  • c48f338 fix(core): swizzle --eject js should not copy theme .d.ts files (#7776)
  • c3d2e0d fix(sitemap): complete gracefully when all pages have noIndex meta (#7774)
  • 665c311 chore: bump Infima to 0.2.0-alpha.42, fix a:hover link bug (#7771)
  • 1899a2e docs: add EverShop website to showcase (#7765)
  • 542228e fix(deploy): revert "feat(deploy): copy local git config to tmp repo (#7702)" (#7750)
  • a4b4a7f fix(migrate): import siteConfig with file extension (#7766)
  • 337463a chore(theme-translations): complete ko translations (#7762)
  • 9467da6 chore(deps): bump actions/setup-node from 3.3.0 to 3.4.0 (#7764)
  • cba8be0 fix(theme-classic): validate options properly (#7755)
  • 636d470 refactor(core): use has instead of get to test for existence in ExecEnv (#7763)
  • f21dadf docs: add StackQL Provider Registry to showcase (#7760)

See the full diff

Package name: @docusaurus/preset-classic The new version differs by 250 commits.
  • 2a9e8f5 v2.0.0
  • 2ef40c2 chore: Netlify branch deploys should only deploy default locale "en" (#7788)
  • d88f248 chore: add Netlify config for major version branch deploys (docusaurus-v2 branch) (#7787)
  • e4fc47b Merge branch 'main' into docusaurus-v2
  • 7f40350 chore: fix codesandbox playgrounds, use Node.js 16 version (#7784)
  • 1065e55 refactor(core): log Docusaurus & Node version before exiting (#7781)
  • 965a01e chore: port-2.0.0-rc.1 (#7782)
  • e78a15e chore: ci tests should run on version branches "docusaurus-vX" (#7783)
  • c751bc6 chore: regen v2.0.0-rc.1 examples (#7780)
  • d255389 chore: prepare v2.0.0-rc.1 release (#7778)
  • 443914a docs: add Bruce Wiki website to showcase (#7770)
  • f913af0 docs: release process, versioning, breaking changes, public API surface (#7706)
  • 9788944 refactor(theme): fix duplicate page metadata usage (#7777)
  • c48f338 fix(core): swizzle --eject js should not copy theme .d.ts files (#7776)
  • c3d2e0d fix(sitemap): complete gracefully when all pages have noIndex meta (#7774)
  • 665c311 chore: bump Infima to 0.2.0-alpha.42, fix a:hover link bug (#7771)
  • 1899a2e docs: add EverShop website to showcase (#7765)
  • 542228e fix(deploy): revert "feat(deploy): copy local git config to tmp repo (#7702)" (#7750)
  • a4b4a7f fix(migrate): import siteConfig with file extension (#7766)
  • 337463a chore(theme-translations): complete ko translations (#7762)
  • 9467da6 chore(deps): bump actions/setup-node from 3.3.0 to 3.4.0 (#7764)
  • cba8be0 fix(theme-classic): validate options properly (#7755)
  • 636d470 refactor(core): use has instead of get to test for existence in ExecEnv (#7763)
  • f21dadf docs: add StackQL Provider Registry to showcase (#7760)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

nahtnam avatar Dec 25 '22 18:12 nahtnam

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated
light ❌ Failed (Inspect) Dec 25, 2022 at 6:19PM (UTC)

vercel[bot] avatar Dec 25 '22 18:12 vercel[bot]

Messages
:book:

Benchmark Results

Makes 10,000 requests to each framework and times the result.

Framework Total Time Req/Sec
Express 7778ms 1286
Koa 5364ms 1864
Fastify 4933ms 2027
Light 4871ms 2053

Generated by :no_entry_sign: dangerJS against e9f5c9b265acf76f7350ab25968435c21680b2a4

github-actions[bot] avatar Dec 25 '22 18:12 github-actions[bot]

Codecov Report

Merging #1212 (e9f5c9b) into master (40e3c99) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #1212   +/-   ##
=======================================
  Coverage   20.30%   20.30%           
=======================================
  Files          36       36           
  Lines         330      330           
  Branches       54       54           
=======================================
  Hits           67       67           
- Misses        241      263   +22     
+ Partials       22        0   -22     
Impacted Files Coverage Δ
packages/@lightjs/cli/src/index.ts 0.00% <0.00%> (ø)
packages/@lightjs/cli/src/commands/dev.ts 0.00% <0.00%> (ø)
packages/@lightjs/cli/src/commands/start.ts 0.00% <0.00%> (ø)
packages/@lightjs/test/src/createTest/index.ts 0.00% <0.00%> (ø)
packages/@lightjs/core/src/createRoute/index.ts 83.72% <0.00%> (ø)
packages/@lightjs/logger/src/useLogger/index.ts 0.00% <0.00%> (ø)
packages/@lightjs/config/src/utils/importFile.ts 0.00% <0.00%> (ø)
packages/@lightjs/router/src/createRouter/index.ts 0.00% <0.00%> (ø)
packages/@lightjs/server/src/createServer/index.ts 0.00% <0.00%> (ø)
...ages/@lightjs/router/src/utils/importRouteFiles.ts 0.00% <0.00%> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

codecov[bot] avatar Dec 25 '22 18:12 codecov[bot]