BlueWallet / LndHub

Wrapper for Lightning Network Daemon. It provides separate accounts for end-users
http://LndHub.io
MIT License
765 stars 191 forks source link

[Snyk] Upgrade: @babel/cli, @babel/core, @babel/node, @babel/preset-env, @babel/register #237

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on
@babel/cli
from 7.14.3 to 7.14.5
1 version ahead of your current version 21 days ago
on 2021-06-09
@babel/core
from 7.14.3 to 7.14.5
1 version ahead of your current version 21 days ago
on 2021-06-09
@babel/node
from 7.13.13 to 7.14.5
2 versions ahead of your current version 21 days ago
on 2021-06-09
@babel/preset-env
from 7.14.1 to 7.14.5
3 versions ahead of your current version 21 days ago
on 2021-06-09
@babel/register
from 7.13.16 to 7.14.5
1 version ahead of your current version 21 days ago
on 2021-06-09

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
265/1000
Why? CVSS 5.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @babel/cli from @babel/cli GitHub release notes
Package name: @babel/core from @babel/core GitHub release notes
Package name: @babel/node from @babel/node GitHub release notes
Package name: @babel/preset-env from @babel/preset-env GitHub release notes
Package name: @babel/register from @babel/register GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs