garnishjs
garnishjs copied to clipboard
[Snyk] Security upgrade karma from 1.7.1 to 6.3.16
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
556/1000 Why? Recently disclosed, Has a fix available, CVSS 5.4 |
Open Redirect SNYK-JS-KARMA-2396325 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: karma
The new version differs by 250 commits.- ab4b328 chore(release): 6.3.16 [skip ci]
- ff7edbb fix(security): mitigate the "Open Redirect Vulnerability"
- c1befa0 chore(release): 6.3.15 [skip ci]
- d9dade2 fix(helper): make mkdirIfNotExists helper resilient to concurrent calls
- 653c762 ci: prevent duplicate CI tasks on creating a PR
- c97e562 chore(release): 6.3.14 [skip ci]
- 91d5acd fix: remove string template from client code
- 69cfc76 fix: warn when `singleRun` and `autoWatch` are `false`
- 839578c fix(security): remove XSS vulnerability in `returnUrl` query param
- db53785 chore(release): 6.3.13 [skip ci]
- 5bf2df3 fix(deps): bump log4js to resolve security issue
- 36ad678 chore(release): 6.3.12 [skip ci]
- 41bed33 fix: remove depreciation warning from log4js
- c985155 docs: create security.md
- c96f0c5 chore(release): 6.3.11 [skip ci]
- a5219c5 fix(deps): pin colors package to 1.4.0 due to security vulnerability
- de0df2f test: fix version regex in the CLI test case
- eddb2e8 chore(release): 6.3.10 [skip ci]
- 0d24bd9 fix(logger): create parent folders if they are missing
- b8eafe9 chore(release): 6.3.9 [skip ci]
- cf318e5 test: add test case for restarting test run on file change
- 92ffe60 fix: restartOnFileChange option not restarting the test run
- b153355 style: fix grammar error in browser capture log message
- 8f798d5 chore(release): 6.3.8 [skip ci]
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report