[Snyk] Fix for 2 vulnerabilities - Githubissues

Snugug / gulp-armadillo

The rebirth of the Armadillo static site generator, as a series of Gulp tasks!

MIT License

16 stars 6 forks source link

[Snyk] Fix for 2 vulnerabilities #334

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-AUTOLINKER-564438	Yes	Proof of Concept
	Arbitrary File Write via Archive Extraction (Zip Slip) SNYK-JS-DECOMPRESS-557358	Yes	Proof of Concept

Commit messages

Package name: gulp-imagemin

The new version differs by 11 commits.

805d945 5.0.0
a576ff2 Require Gulp 4
4fd98eb Meta tweaks
b57f1d6 Require Node.js 6 and update dependencies (#315)
658ec66 Update URL to XO
e1e3cf2 4.1.0
adb1e87 Removed use of deprecated gutil (#289)
d33fc30 Remove Code Sponsor
a02c58b 4.0.0
1f28b70 package.json indentation
62ad533 Bump `imagemin-svgo`

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic