search

YIZHUANG / react-multi-carousel

A lightweight production-ready Carousel that rocks supports multiple items and server-side rendering with no dependency. Bundle size 2kb.
MIT License
1.25k stars 286 forks source link

[Snyk] Security upgrade snyk from 1.278.2 to 1.290.1 #354

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 556/1000
Why? Recently disclosed, Has a fix available, CVSS 5.4		 Open Redirect
SNYK-JS-GOT-2932019		 No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: snyk The new version differs by 58 commits.
  • bc4074a Merge pull request #990 from snyk/fix/dot-prop-vuln-update
  • b74bbe2 fix: use @ snyk/update-notifier instead of update-notifier
  • 93845d9 fix: use @ snyk/configstore instead of configstore
  • 2c21f03 Merge pull request #984 from snyk/feat/bump-python-plugin
  • 3c06cb6 feat: use latest python plugin
  • 899482f Merge pull request #987 from snyk/robpickerill-master
  • 08cf57d Merge pull request #989 from snyk/feat/report-java-and-mvn-version
  • 98a7031 fix: correct object path to mvn and java version
  • 42fa08c Merge pull request #988 from snyk/feat/report-java-and-mvn-version
  • 23cbd4c feat: add java and maven version to analytics
  • 456696d chore: fix small typo gradle => docker in the README
  • eea5146 Merge pull request #983 from snyk/chore/add-targetfile-to-test-logs
  • e08bc8f Merge pull request #964 from snyk/feat/add-python-to-auto-detect
  • e1651dd feat: add python to auto manifest discovery
  • c25a142 feat: push `targetFileRelativePath` to registry payload
  • c52e45a Merge pull request #982 from snyk/fix/auto-detect-help-text
  • 1f1fd72 fix: move --all-projects help text
  • a295643 Merge pull request #978 from snyk/feat/add-paket-to-all-projects
  • b169bd7 Merge pull request #981 from snyk/chore/update-readme-links
  • db34336 feat: enable paket to be autodetected with --all-projects
  • ff2ee39 Merge pull request #977 from snyk/feat/auto-detect-golang
  • 263fc72 chore: update docs for Python Docker
  • 0bbeda5 Merge pull request #979 from snyk/fix/add-jar-scanning-flag
  • d282b35 Merge pull request #980 from snyk/fix/move-docker-json-before-lang-args
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect