fence icon indicating copy to clipboard operation
fence copied to clipboard

[Snyk] Security upgrade swagger-ui from 3.52.5 to 4.16.1

Open snyk-bot opened this issue 2 years ago • 1 comments

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • openapis/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 556/1000
Why? Recently disclosed, Has a fix available, CVSS 5.4
Cross-site Scripting (XSS)
SNYK-JS-BRAINTREESANITIZEURL-3330766
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: swagger-ui The new version differs by 250 commits.
  • d3a1e94 revert: integrate [email protected] (#8426)
  • 136456b chore(deps-dev): bump jsdom from 20.0.0 to 21.1.0 (#8417)
  • cbeb912 chore(deps-dev): bump @ commitlint/config-conventional (#8423)
  • 7b47886 chore(deps): bump @ braintree/sanitize-url from 6.0.0 to 6.0.2 (#8422)
  • d95428e chore(deps-dev): bump @ babel/core from 7.14.6 to 7.21.0 (#8421)
  • 7a6b924 chore(deps-dev): bump react-refresh from 0.11.0 to 0.14.0 (#8420)
  • fe6ebc6 chore(deps-dev): bump json-server from 0.17.0 to 0.17.2 (#8419)
  • b6648c5 chore(deps-dev): bump @ babel/cli from 7.16.8 to 7.21.0 (#8416)
  • e00fefd chore(release): cut the v4.16.0 release
  • d293555 feat: integrate [email protected] (#8415)
  • 81e7eda chore(deps-dev): update dependencies (#8412)
  • fd0b0a2 chore(deps-dev): bump jest from 28.1.3 to 29.4.3 (#8395)
  • 11957fb chore: regenerate package-lock.json (#8411)
  • 21cfda3 test(cypress): fix tests flakiness by stubbing httpbin.org requests (#8410)
  • 6164292 feat: integrate [email protected] (#8405)
  • aaf4843 ci(ga): add next branch to build and dependabot workflows (#8394)
  • f924071 ci(ga): copy ga workflows from next (#8393)
  • 33f2a0b ci(release): update npm token (#8385)
  • e2e2920 ci(release): update github action for npm package (#8384)
  • 812403e ci(release): update ga for swagger-ui-react to npm publish (#8382)
  • 9fd26cd ci(release): github actions to release `next` branch (#8380)
  • fb2eefc chore(deps): bump @ sideway/formula from 3.0.0 to 3.0.1 (#8375)
  • 773a372 chore(SCA): remove all whitesource configs (#8371)
  • 718924b chore(deps): bump json5 and babel-plugin-module-resolver (#8369)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

snyk-bot avatar Feb 26 '23 01:02 snyk-bot