Prodeko / prodeko-org-djangocms

Prodeko's main website
https://prodeko.org
1 stars 2 forks source link

[Snyk] Security upgrade moment from 2.29.1 to 2.29.4 #122

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: ๐Ÿง View latest project report

๐Ÿ›  Adjust project settings

๐Ÿ“š Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

๐Ÿฆ‰ Learn about vulnerability in an interactive lesson of Snyk Learn.

codecov[bot] commented 2 years ago

Codecov Report

Merging #122 (eb5f946) into master (61a3dd6) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #122   +/-   ##
=======================================
  Coverage   62.61%   62.61%           
=======================================
  Files         132      132           
  Lines        4916     4916           
=======================================
  Hits         3078     3078           
  Misses       1838     1838           
Flag Coverage ฮ”
unittests 62.61% <รธ> (รธ)

Flags with carried forward coverage won't be shown. Click here to find out more.


Continue to review full report at Codecov.

Legend - Click here to learn more ฮ” = absolute <relative> (impact), รธ = not affected, ? = missing data Powered by Codecov. Last update 61a3dd6...eb5f946. Read the comment docs.