YamagutiSenior / juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
https://owasp-juice.shop
MIT License
0 stars 0 forks source link

[Snyk] Upgrade pdfkit from 0.11.0 to 0.15.0 #9

Open YamagutiSenior opened 1 month ago

YamagutiSenior commented 1 month ago

snyk-top-banner

Snyk has created this PR to upgrade pdfkit from 0.11.0 to 0.15.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Use of Weak Hash
SNYK-JS-CRYPTOJS-6028119
574 No Known Exploit
Release notes
Package name: pdfkit
  • 0.15.0 - 2024-03-24
    • Add subset for PDF/UA
    • Fix for line breaks in list items (#1486)
    • Fix for soft hyphen not being replaced by visible hyphen if necessary (#457)
    • Optimize output files by ignoring identity transforms
    • Fix for Acroforms - setting an option to false will still apply the flag (#1495)
    • Fix for text extraction in PDFium-based viewers due to invalid ToUnicodeMap (#1498)
    • Remove deprecated write method
    • Drop support for Node.js < 18 and for browsers released before 2020
  • 0.14.0 - 2023-11-09
    • Add support for PDF/A-1b, PDF/A-1a, PDF/A-2b, PDF/A-2a, PDF/A-3b, PDF/A-3a
    • Update crypto-js to v4.2.0 (properly fix security issue)
  • 0.13.0 - 2021-10-24
    • Add tiling pattern support
  • 0.12.3 - 2021-08-01

    v0.12.3

  • 0.12.2 - 2021-08-01
  • 0.12.1 - 2021-04-10
    • Update crypto-js to v3.3 (fix security issue)
    • Update fontkit to 1.8.1
  • 0.12.0 - 2021-04-04
    • Add support for Embedded Files and File Attachment Annotations
    • Accessibility support
    • Replace integration tests by visual regression tests
    • Fix access permissions in PDF version 1.7ext3
    • Fix Buffer() is deprecation warning
    • Add forms.md to generate documentation files
    • Fix "@" in FontName
  • 0.11.0 - 2019-12-10
    • Fix infinite loop when an individual character is bigger than the width of the text.
    • Fix infinite loop when text is positioned after page right margin
    • Allow links in continued text to be stopped by setting link to null
    • Add support to interlaced PNG files
    • Do not emit _interopDefault helper in commonjs build
    • Fix gradient with multiple stops (#1045)
    • Set link annotation flag to print by default
    • Add support for AcroForms
    • Drop support for (uncommon) cid less fonts on standalone build (reduces bundle size)
from pdfkit GitHub release notes

[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

sonarcloud[bot] commented 1 month ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud