vue-oop
vue-oop copied to clipboard
[Snyk] Fix for 1 vulnerabilities
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795 |
Yes | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: danger
The new version differs by 229 commits.- 54f7f7a Release 11.2.1
- d7cd274 Try wrap up PR
- 042c4fa Merge branch 'main' of https://github.com/danger/danger-js
- 0f48d32 Merge pull request #1342 from pepix/support-arm64-target
- 64d9833 Merge pull request #1345 from connyay/cjh-bump-jwt
- dea9c6c Upgrade jsonwebtoken and @ types/jsonwebtoken
- 40bdfe1 Add a new workflow to build binaries for macOS architectres on GitHub Actions
- 4efada7 Update release-it.json and create-homebrew-tap-pr.sh
- 16271cd Support arm64 binary generation
- ad3c542 Release 11.2.0
- 6829c33 CHANGELOG for release
- c3641dc Merge pull request #1331 from hcomde/issue_1138_gitlab_threads
- f8453e9 Merge pull request #1337 from stodirascu/fix-github-action
- beb7f41 Moving the GITHUB_WORKFLOW check before actually getting the userInfo
- 90f595b GitLab: Add support to use threads instead of comments
- 639898f Merge pull request #1336 from falkenhawk/patch-1
- 7b60e62 fix messing the order of messages
- 0c8804f Merge pull request #1332 from ivankatliarchuk/issue_1330
- 886616b use this.log instead
- 98fd3f0 update message
- c4d1cbf wip
- 3a97856 update CHANGELOG
- 6b47827 added environment variable DANGER_SKIP_WHEN_EMPTY
- 2bcccbd Update issue_template.md
Package name: jest
The new version differs by 250 commits.- be16e47 v27.0.0
- 63102ec chore: update changelog for release
- 564694a docs(blog): Jest 27 blog post (#11131)
- b68d91b feat(pretty-print): add option `printBasicPrototype` (#11441)
- 2226742 chore: minor simplify format results error (#11432)
- 78eb25d chore: remove needless assign (#11433)
- 696c455 chore: update lockfile after publish
- e2eb9ae v27.0.0-next.11
- 3b253f8 Wait for closed resources to actually close before detecting open handles (#11429)
- 27bee72 fix: run GC before collecting open handles (#11278)
- 50451df feat: use fallback if prettier not found (#11400)
- 150dbd8 chore: update lockfile after publish
- 6f44529 v27.0.0-next.10
- cbcec7d Upgrade fsevents in jest-haste-map (#11428)
- 9633a26 feat: support reporters written in ESM (#11427)
- 59f42d8 fix: do not cache modules that throw during evaluation (#11263)
- 57e32e9 Detect open handles with done callbacks (#11382)
- a397607 Document and test dontThrow for custom inline snapshot matchers (#10995)
- 4fa3a0b feat: custom haste (#11107)
- 2047a36 chore: bump deps (#11419)
- a4358d6 chore: run prettier on changelog
- bdd6282 Move all default values into `jest-config` (#9924)
- db643a1 Link to Jest config (#11106)
- b16082c Fix locale issue #10014 (#11412)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons: