draftjs-examples icon indicating copy to clipboard operation
draftjs-examples copied to clipboard

[Snyk] Fix for 1 vulnerabilities

Open rajaraodv opened this issue 1 year ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
Prototype Pollution
SNYK-JS-LODASH-6139239
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: sendgrid The new version differs by 200 commits.
  • c29a5c4 Version Bump v5.2.2: Pull #418: Fixed #417
  • 8a2436d Merge pull request #418 from SPARTAN563/fix/417-update-index-ts
  • 2079172 Version Bump v5.2.1: Pull #413: Handle null and undefined values in substitutions
  • 3c4f82b Merge pull request #413 from zoitravel/master
  • c2a03cd fix: Update TypeScript definition to correct callback arguments for API
  • 59ecaa3 Merge pull request #415 from gabrielkrell/master
  • 9eaadeb Add notifications badge, text
  • 4d9ea56 handle null and undefined values
  • eb7bce7 Version Bump 5.2.0: Pull #410: Cast substitution values to strings
  • ae8a935 Merge pull request #410 from dangerismycat/patch-1
  • e218c42 Cast substitution values to strings
  • ac1818c Version Bump v5.1.2: PR #399: Fix type
  • d2235a0 Merge pull request #399 from zoitravel/batchId-type
  • 510635a fixed `batch_id` type (string)
  • b29d1c6 Merge pull request #395 from sendgrid/test_hello_world
  • 617e99f Remove duplicate variable declaration
  • 19b36ea Updating test to reflect Hello World Example
  • 9767ae6 Version Bump v5.1.1: PR #391 Return personalizations as an array of request compatible JSON.
  • c68e7d7 Merge pull request #391 from hpaul/patch-1
  • 7dc8567 Return personalizations as an array of request compatible JSON.
  • 4af67b1 Update README.md
  • 9d448b5 Version Bump v5.1.0: #325 Run prism for tests
  • 5a742e2 Correctd supported versions
  • 74752b3 Prism now runs local to Travis

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

rajaraodv avatar Apr 16 '24 04:04 rajaraodv