GeoTIFF / geotiff.io

Static website for viewing and analyzing GeoTIFF's in the browser
https://app.geotiff.io
MIT License
113 stars 25 forks source link

[Snyk] Security upgrade webpack-bundle-analyzer from 2.13.1 to 3.1.0 #253

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
Yes No Known Exploit
Commit messages
Package name: webpack-bundle-analyzer The new version differs by 76 commits.
  • c078a8a Update package-lock.json
  • 508abf7 v3.1.0
  • c0f0165 Merge pull request #223 from webpack-contrib/use-buffer-bytelength
  • b04a23c Merge pull request #248 from realityking/acorn-6
  • 2d340ff v3.0.4
  • 477d362 Add changelog entry for async fix (#250)
  • 1c8aba3 Make webpack's done hook wait until analyzer writes report / stat file. (#247)
  • 59c51b7 Update acorn to version 6
  • 1821812 Fix error message typo (#234)
  • f94fb30 Merge pull request #231 from fanich37/stat-size-issue
  • 363a34a Fix README.md
  • fa30ce1 Clean usage section at README.md
  • 66f48d9 Update troubleshooting section at README.md
  • 15402cb Update README.md (#191)
  • a3ee8e0 ci: test Node.js 6, 8, 10 and 11 (#227)
  • 0d5824f added tests for special chars byte length
  • b2fc04c replace <str>.length with Buffer.byteLength(<str>)
  • 61f260b Add Yarn install instructions to readme (#222)
  • d145284 v3.0.3
  • aeaa843 Add changelog entry for #215
  • d5d5eb8 Update package-lock.json resolved fields to https
  • 5be7049 Merge pull request #215 from dvbern/disable-websocket-in-static-mode
  • 256f55f Disable viewer websocket connection if mode is static
  • aad11d1 Merge pull request #210 from leonascimento/chore/improve-documentation
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic