search

Mugetsu15 / corona

Corona incidence viewer
https://corona.maxuniverse.de
Apache License 2.0
1 stars 0 forks source link

[Snyk] Upgrade core-js from 3.13.0 to 3.13.1 #22

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade core-js from 3.13.0 to 3.13.1.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1246392		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1085630		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1246392		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1085630		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Remote Memory Exposure
SNYK-JS-DNSPACKET-1293563		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ISSVG-1243891		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ISSVG-1085627		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-COLORSTRING-1082939		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-BROWSERSLIST-1090194		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: core-js
  • 3.13.1 - 2021-05-29
    • Overwrites get-own-property-symbols third-party Symbol polyfill if it's used since it causes a stack overflow, #774
    • Added a workaround of possible browser crash on Object.prototype accessors methods in WebKit ~ Android 4.0, #232
  • 3.13.0 - 2021-05-25
from core-js GitHub release notes
Commit messages
Package name: core-js
  • a05c21c 3.13.1
  • 2a5a44a change the wording
  • c2b4e64 no longer use symbols from `get-own-property-symbols` polyfill, close #774
  • 47d11d0 added a workaround of possible browser crash on `Object.prototype` accessors method in WebKit ~ Android 4.0, close #232
  • 991d46b update dependencies
  • 233ce3a fix some comments
  • 4d6ff5b fix some comments
  • 4fbaf6e update a link
  • c11a843 fix typo
  • d55dc9c fix typo
  • c5e3935 update dependencies
  • 1ac65f0 move `qunit` helpers to main tests bundles
  • 2bbbd47 just in case add a test of operations order in `Object.hasOwn`
  • 43095ad use native `Object.hasOwn` if it's available in internal `has` helper
  • 78fc53e update dependencies
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs