DeviaVir / zenbot

Zenbot is a command-line cryptocurrency trading bot using Node.js and MongoDB.
MIT License
8.21k stars 2.04k forks source link

[Snyk] Upgrade css-loader from 5.2.6 to 5.2.7 #2811

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade css-loader from 5.2.6 to 5.2.7.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Information Exposure
SNYK-JS-NANOID-2332193
379/1000
Why? Proof of Concept exploit, Recently disclosed, CVSS 4
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: css-loader
  • 5.2.7 - 2021-07-13

    5.2.7 (2021-07-13)

    Bug Fixes

    • fix crash when source map is unavailable with external URL in [@ import](https://snyk.io/redirect/github/import) (bb76fe4)
  • 5.2.6 - 2021-05-24

    5.2.6 (2021-05-24)

    Bug Fixes

    • always write locals export when css modules/icss enabled (#1315) (075d9bd)
from css-loader GitHub release notes
Commit messages
Package name: css-loader
  • ae98845 chore(release): 5.2.7
  • bb76fe4 fix: fix crash when source map is unavailable with external URL in `@ import`
  • adcc438 ci: use `actions/setup-node@v2` (#1323)
  • c7f81eb chore: fix typo (#1318)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs