commit-lint[bot]
commented
2 years ago Bug Fixes
- package.json & package-lock.json to reduce vulnerabilities (cccf5e5)
Contributors
Commit-Lint commands
You can trigger Commit-Lint actions by commenting on this PR: - `@Commit-Lint merge patch` will merge dependabot PR on "patch" versions (X.X.Y - Y change) - `@Commit-Lint merge minor` will merge dependabot PR on "minor" versions (X.Y.Y - Y change) - `@Commit-Lint merge major` will merge dependabot PR on "major" versions (Y.Y.Y - Y change) - `@Commit-Lint merge disable` will desactivate merge dependabot PR - `@Commit-Lint review` will approve dependabot PR - `@Commit-Lint stop review` will stop approve dependabot PR
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
:sparkles: Snyk has automatically assigned this pull request, set who gets assigned.
As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
SNYK-JS-JSPDF-1073626
Why? Proof of Concept exploit, Has a fix available, CVSS 6.3
SNYK-JS-JSPDF-568273
Why? Proof of Concept exploit, Has a fix available, CVSS 6.3
SNYK-JS-JSPDF-575256
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-LODASH-1018905
Why? Proof of Concept exploit, Has a fix available, CVSS 7.2
SNYK-JS-LODASH-1040724
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: html2pdf.js
The new version differs by 9 commits.- 43a2f8b Build v0.10.0
- 5be22be Add bundled and min files back into npm
- 78580ea Remove dist from git tracking
- 3f762d5 Prevent publishing bundles/mins/tests to npm
- d97c69e Upgrade dependencies to fix audit issues (#462)
- e2bcb98 Fix set-pageSize behaviour (#455)
- 3b2d8cf Add automated testing and snapshots with pdftest (#454)
- 7c78308 Merge pull request #369 from jakewhelan/jwhelan-fix-jspdf
- 0d072c0 fix: set jspdf to 1.4.1 to avoid semver resolution of newer versions
See the full diffPackage name: lodash
The new version differs by 1 commits.- c6e281b Bump to v4.17.21
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
👩💻 Set who automatically gets assigned
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS) 🦉 Cross-site Scripting (XSS) 🦉 Cross-site Scripting (XSS) 🦉 More lessons are available in Snyk Learn