Chia-Network / Climate-Tokenization-Engine-UI

Create tokenized carbon units on the blockchain
Apache License 2.0
1 stars 3 forks source link

[Snyk] Fix for 1 vulnerabilities #199

Closed ChiaAutomation closed 1 year ago

ChiaAutomation commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - build_scripts/npm_macos/package.json - build_scripts/npm_macos/package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **658/1000**
**Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-SEMVER-3247795](https://snyk.io/vuln/SNYK-JS-SEMVER-3247795) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: git-authors-cli The new version differs by 27 commits.
  • 7727df2 chore(release): 1.0.46
  • 4014eb8 refactor: drop update-notifier
  • 40bb226 chore(release): 1.0.45
  • 1588999 build: tweaks
  • 264e8af docs: fix highlight
  • d525911 chore(release): 1.0.44
  • 141fe64 fix: add missing processError method
  • d76de1e chore(release): 1.0.43
  • 78dcf5c Merge pull request #37 from Schniz/dont-use-tty-on-cli
  • 090c572 fix: don't use tty on this CLI
  • c4d9cec chore(release): 1.0.42
  • 3a2b9e1 refactor: use mri instead of meow
  • 0a1f478 chore(release): 1.0.41
  • 4111179 build: update dependencies
  • 36e069b chore(release): 1.0.40
  • 5f0ac37 fix: linter
  • 3c453b4 ci: tweaks
  • 20efeab Merge pull request #36 from jonasgloning/master
  • 61c3c14 Update bin/index.js
  • 44d791f fix(sorting): sort authors by email and name before sorting by commit count
  • 0d9906d chore(release): 1.0.39
  • afee25f Merge branch 'master' of github.com:Kikobeats/git-authors-cli
  • 355c72c ci: use c8 instead of nyc
  • d859dc2 chore(release): 1.0.38
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/climate-warehouse/project/a1b08c6e-b081-4333-ad3c-d218c9eb1ac6?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/climate-warehouse/project/a1b08c6e-b081-4333-ad3c-d218c9eb1ac6?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"4664bf57-92e9-4da3-a257-3bfb1ce285f1","prPublicId":"4664bf57-92e9-4da3-a257-3bfb1ce285f1","dependencies":[{"name":"electron-builder","from":"22.14.13","to":"23.5.0"},{"name":"git-authors-cli","from":"1.0.37","to":"1.0.46"}],"packageManager":"npm","projectPublicId":"a1b08c6e-b081-4333-ad3c-d218c9eb1ac6","projectUrl":"https://app.snyk.io/org/climate-warehouse/project/a1b08c6e-b081-4333-ad3c-d218c9eb1ac6?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-SEMVER-3247795"],"upgrade":["SNYK-JS-SEMVER-3247795"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[658],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Regular Expression Denial of Service (ReDoS)](https://learn.snyk.io/lessons/redos/javascript/?loc=fix-pr)