Garlic-Team / InviteManager

Discord.js invite manager with db (mysql/sqlite/mongodb etc)
MIT License
36 stars 14 forks source link

[Snyk] Security upgrade gcommands from 5.2.3 to 8.0.0 #36

Closed xhyrom closed 5 months ago

xhyrom commented 10 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **748/1000**
**Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.1 | Cross-site Request Forgery (CSRF)
[SNYK-JS-AXIOS-6032459](https://snyk.io/vuln/SNYK-JS-AXIOS-6032459) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gcommands The new version differs by 250 commits.
  • 33dc6b3 Merge pull request #231 from Garlic-Team/dev
  • f97c140 Update GCommandsClient.js
  • 5b9d079 Update package.json
  • 09b4492 Merge pull request #255 from alputv/patch-1
  • f2decac [CodeFactor] Apply fixes to commit 841310e
  • 841310e Suggested change ✨
  • 0ace61e [CodeFactor] Apply fixes to commit 309a6b2
  • 309a6b2 ESlint fix 🔧
  • 42f8639 Fix context menus
  • 7b83c0d Fix clickButton/selectMenu
  • 0996572 Fix clickButton/selectMenu
  • d2d6d67 Merge pull request #252 from Garlic-Team/dependabot-npm_and_yarn-dev-hyttpo-0.2.6
  • dca466e Merge pull request #253 from Garlic-Team/dependabot-npm_and_yarn-dev-gcommands-components-1.0.3
  • 20a95ca Merge pull request #254 from Garlic-Team/dependabot-npm_and_yarn-dev-eslint-8.2.0
  • 91b5d14 Bump hyttpo from 0.2.4 to 0.2.6
  • 8544076 Bump @ gcommands/components from 1.0.1 to 1.0.3
  • a3a3f32 Update GComponents version
  • a4e21b8 Fix GComponents integration
  • 744781f Fix commands without arguments
  • 5e791a9 Bump eslint from 8.1.0 to 8.2.0
  • 2e76c5c Merge pull request #251 from Garlic-Team/dev-cf-autofix
  • 7affd0e [CodeFactor] Apply fixes to commit 4495e14
  • d0b0be6 [CodeFactor] Apply fixes to commit 4495e14
  • 4495e14 eslint
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/xhyrom/project/7156a830-1885-4210-a1e6-e35cddf20fbd?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/xhyrom/project/7156a830-1885-4210-a1e6-e35cddf20fbd?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"86ca7e8a-d8c9-4ffd-9f55-f35ee2c22a85","prPublicId":"86ca7e8a-d8c9-4ffd-9f55-f35ee2c22a85","dependencies":[{"name":"gcommands","from":"5.2.3","to":"8.0.0"}],"packageManager":"npm","projectPublicId":"7156a830-1885-4210-a1e6-e35cddf20fbd","projectUrl":"https://app.snyk.io/org/xhyrom/project/7156a830-1885-4210-a1e6-e35cddf20fbd?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-AXIOS-6032459"],"upgrade":["SNYK-JS-AXIOS-6032459"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[748],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Cross-site Request Forgery (CSRF)](https://learn.snyk.io/lesson/csrf-attack/?loc=fix-pr)