RaphaelDDL / e7db-ui

EpicSevenDB.com UI for game information, such as Heroes, Artifacts, Gear, Skills and anything else necessary to present the DB. Made with NUXT.js (Vue.js, Express, SASS)
https://epicsevendb.com
Other
10 stars 5 forks source link

[Snyk] Security upgrade @nuxtjs/axios from 5.12.2 to 5.12.3 #46

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 616/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Server-Side Request Forgery (SSRF)
SNYK-JS-AXIOS-1038255
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @nuxtjs/axios The new version differs by 13 commits.
  • 450498e chore(release): 5.12.3
  • 2364978 chore: update yarn.lock
  • 7b32262 fix: `$loading().set(Infinity)` issue (#424)
  • e58c136 docs: fix typo (#432)
  • 2ffbb42 docs: change "module" to "logo" typo (#431)
  • 76e9c87 chore(deps): update all non-major dependencies (#410)
  • 1fd2220 chore(deps): update actions/cache action to v2 (#439)
  • 4f8a53c docs: fix typo (#435)
  • 7e1605d docs: fix typos in setup.md (#434)
  • 7e093fa docs: improvements (#429)
  • a3f708d docs: fix pages order in next/prev menu (#414)
  • c68bf17 chore: simplify package.json
  • 3ed62f0 docs: rebuild on package.json change
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic