io-app icon indicating copy to clipboard operation
io-app copied to clipboard

[Snyk] Security upgrade react-native-reanimated from 2.7.0 to 2.10.0

Open snyk-bot opened this issue 2 years ago β€’ 2 comments

Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • yarn.lock

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-REACTNATIVEREANIMATED-2949507
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

πŸ›  Adjust project settings

πŸ“š Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

πŸ¦‰ Regular Expression Denial of Service (ReDoS)

snyk-bot avatar Oct 16 '22 21:10 snyk-bot

Warnings
:warning: Please include a Pivotal story or Jira ticket at the beginning of the PR title

Example of PR titles that include pivotal stories:

  • single story: [#123456] my PR title
  • multiple stories: [#123456,#123457,#123458] my PR title

Example of PR titles that include Jira tickets:

  • single story: [PROJID-123] my PR title
  • multiple stories: [PROJID-1,PROJID-2,PROJID-3] my PR title

Generated by :no_entry_sign: dangerJS against 0d06e9be1d4f5b6d4ceafeb7e9f61f8c03022f7b

pagopa-github-bot avatar Oct 16 '22 21:10 pagopa-github-bot

Codecov Report

Merging #4133 (0d06e9b) into master (5f06bc3) will not change coverage. The diff coverage is n/a.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##           master    #4133   +/-   ##
=======================================
  Coverage   47.75%   47.75%           
=======================================
  Files        1263     1263           
  Lines       25003    25003           
  Branches     6546     6546           
=======================================
  Hits        11940    11940           
  Misses      13013    13013           
  Partials       50       50           

Continue to review full report at Codecov.

Legend - Click here to learn more Ξ” = absolute <relative> (impact), ΓΈ = not affected, ? = missing data Powered by Codecov. Last update 5f06bc3...0d06e9b. Read the comment docs.

codecov[bot] avatar Oct 16 '22 21:10 codecov[bot]

Reanimated has now been updated at 2.9.1 version

CrisTofani avatar Oct 24 '22 13:10 CrisTofani