FrancesCoronel / personal-website-v3

My virtual lair - v3.0. 🏠
https://www.fvcproductions.com
MIT License
9 stars 9 forks source link

[Snyk] Security upgrade browser-sync from 2.26.7 to 2.26.9 #457

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Denial of Service (DoS)
SNYK-JS-HTTPPROXY-569139
No Proof of Concept
medium severity Prototype Pollution
SNYK-JS-YARGSPARSER-560381
No Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
npm:ua-parser-js:20180227
No Proof of Concept
Commit messages
Package name: browser-sync The new version differs by 14 commits.
  • 2b55728 v2.26.9
  • 2bf8812 v2.26.8
  • 0f3cc0b fix: npm audit fixes (root)
  • ba1f09f fix: npm audit fixes
  • d89252a Merge pull request #1749 from ProLoser/securityFix
  • df81272 Merge pull request #1771 from tolulawson/master
  • 64f87b9 Merge pull request #1768 from fozzleberry/bump-http-proxy-1.18.1
  • 43dc459 Merge pull request #1725 from nitinbansal1989/master
  • 894d031 -- Corrected codesync tagline
  • 0667104 used correct syntax on bump
  • 938e611 bumped node engines to >= 8.0.0
  • 20a0334 bumped http proxy to >=1.18.1
  • c103029 Security fix for #1649
  • 864c9f1 upgrade chokidar version
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic