paretOS
paretOS copied to clipboard
Published
20 hours ago •
mikhael28
mikhael28
[Snyk] Security upgrade vite from 4.3.9 to 4.5.2
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5 |
Access Control Bypass SNYK-JS-VITE-6182924 |
No | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: vite
The new version differs by 237 commits.- d0360c1 release: v4.5.2
- eeec23b fix: fs deny for case insensitive systems (#15653)
- c075115 release: v4.5.1
- 41bb354 fix: backport #15223, proxy html path should be encoded (#15226)
- f7f53aa docs: adjust sponsor logo
- 4d29cfe docs: link to ViteConf replay (#14970)
- 2004a67 docs: remix sponsor logo
- 055d2b8 release: v4.5.0
- ed7bdc5 feat: scan .marko files (#14669)
- 45595ef feat: backport mdx as known js source (#14560) (#14670)
- 520139c feat(ssr): backport ssr.resolve.conditions and ssr.resolve.externalConditions (#14498) (#14668)
- ad7466c docs: redirect vite.dev to vitejs.dev
- b50db04 release: v4.4.11
- 54e1275 revert: "fix: use string manipulation instead of regex to inject esbuild helpers
- f3a3e77 release: v4.4.10
- f8b9adb fix: restore builtins list
- 104971d fix(resolve): support submodules of optional peer deps (#14489)
- 0c6d289 fix(analysis): warnings for dynamic imports that use static template literals (#14458)
- 269aa43 fix(import-analysis): preserve importedUrls import order (#14465)
- 6f6e5de fix: handle errors during `hasWorkspacePackageJSON` function (#14394)
- 8bc1f9d feat: improve deno and bun support (#14379)
- 3d63ae6 fix(manifest): preserve pure css chunk assets (#14297)
- d334b3d fix(css): reset render cache on renderStart (#14326)
- fcaf749 fix(optimizer): define crawlDeps after scanProcessing and optimizationResult are complete (fix #14284) (#14285)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
