socket-security[bot]
commented
7 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@ladjs/graceful@1.1.5 | Transitive: environment | +2 |
61.7 kB | niftylettuce |
| npm/bree@7.2.0 | filesystem Transitive: environment | +2 |
138 kB | shadowgate15 |
| npm/cabin@9.1.2 | environment Transitive: eval, filesystem, network, shell, unsafe | +116 |
4.58 MB | niftylettuce |
| npm/email-templates@11.1.1 | environment, filesystem Transitive: eval, network, shell | +189 |
19.3 MB | titanism |
| npm/p-map@4.0.0 | None | +3 |
25.3 kB | sindresorhus |
🚮 Removed packages: npm/husky@8.0.3, npm/into-stream@7.0.0, npm/lint-staged@15.2.2, npm/nyc@15.1.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - examples/email-queue/package.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **556/1000****Why?** Recently disclosed, Has a fix available, CVSS 5.4 | Cross-site Scripting (XSS)
[SNYK-JS-RAILROADDIAGRAMS-6282875](https://snyk.io/vuln/SNYK-JS-RAILROADDIAGRAMS-6282875) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised. Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: