8BitJonny / BeatMix

BeatMix let's you select a list of your favourite artists from which all tracks are put into one new playlist for you to hear all day long.
https://beatmix.app
GNU General Public License v3.0
7 stars 1 forks source link

[Snyk] Security upgrade @nuxtjs/axios from 5.9.5 to 5.12.3 #28

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

:sparkles: Snyk has automatically assigned this pull request, set who gets assigned.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 616/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Server-Side Request Forgery (SSRF)
SNYK-JS-AXIOS-1038255
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @nuxtjs/axios The new version differs by 78 commits.
  • 450498e chore(release): 5.12.3
  • 2364978 chore: update yarn.lock
  • 7b32262 fix: `$loading().set(Infinity)` issue (#424)
  • e58c136 docs: fix typo (#432)
  • 2ffbb42 docs: change "module" to "logo" typo (#431)
  • 76e9c87 chore(deps): update all non-major dependencies (#410)
  • 1fd2220 chore(deps): update actions/cache action to v2 (#439)
  • 4f8a53c docs: fix typo (#435)
  • 7e1605d docs: fix typos in setup.md (#434)
  • 7e093fa docs: improvements (#429)
  • a3f708d docs: fix pages order in next/prev menu (#414)
  • c68bf17 chore: simplify package.json
  • 3ed62f0 docs: rebuild on package.json change
  • 44ef193 chore: update CHANGELOG
  • d8bd168 chore(release): 5.12.2
  • 6dd299e docs: fix syntax highlight
  • 8fc02f7 chore: simplify readme
  • 3a2e427 fix: fix netlify.toml
  • 20c9dc3 chore: update badges
  • f09f5e6 chore: fix netlify.toml
  • d9dd5f2 chore: remove husky
  • 465fc56 chore: update issue template
  • 22c65a5 chore(ci): use github actions
  • 85840c6 chore(deps): update all non-major dependencies (#400)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

8BitJonny commented 3 years ago

closed with #41