search

GSA / ai-experience-sharing-platform

This is the source code for the CoE AI Platform (Use Case Library and other content).
Other
11 stars 2 forks source link

[Snyk] Fix for 26 vulnerabilities #1045

Open JJediny opened 3 weeks ago

JJediny commented 3 weeks ago

snyk-top-banner

Snyk has created this PR to fix 26 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

Issue Score
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462		   786  
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577916		   776  
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577917		   776  
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577918		   776  
high severity Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864		   751  
high severity Improper Input Validation
SNYK-JS-URLPARSE-2407770		   726  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		   696  
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727		   696  
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970		   696  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076		   696  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		   696  
medium severity Information Exposure
SNYK-JS-EVENTSOURCE-2823375		   646  
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909		   646  
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856		   641  
medium severity Access Restriction Bypass
SNYK-JS-URLPARSE-2401205		   641  
medium severity Authorization Bypass
SNYK-JS-URLPARSE-2407759		   641  
medium severity Authorization Bypass Through User-Controlled Key
SNYK-JS-URLPARSE-2412697		   631  
high severity Improper Verification of Cryptographic Signature
SNYK-JS-BROWSERIFYSIGN-6037026		   589  
high severity Prototype Pollution
SNYK-JS-LOADERUTILS-3043105		   589  
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		   589  
medium severity Information Exposure
SNYK-JS-NANOID-2332193		   521  
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		   506  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992		   479  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943		   479  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		   479  
medium severity Improper Input Validation
SNYK-JS-POSTCSS-5926692		   479  

[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report 📜 Customise PR templates 🛠 Adjust project settings 📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS) 🦉 Server-side Request Forgery (SSRF) 🦉 Prototype Pollution 🦉 More lessons are available in Snyk Learn

github-actions[bot] commented 3 weeks ago

:eyes: Generating Terraform plan...