craftcms / spoke-and-chain

Craft CMS + Craft Commerce demo site.
https://craftcms.com/demo?kind=spokeandchain
BSD Zero Clause License
53 stars 28 forks source link

[Snyk] Upgrade swiper from 6.4.5 to 6.7.0 #7

Closed angrybrad closed 3 years ago

angrybrad commented 3 years ago

Snyk has created this PR to upgrade swiper from 6.4.5 to 6.7.0.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-SWIPER-1088062
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: swiper
  • 6.7.0 - 2021-05-31

    6.7.0 release

  • 6.6.2 - 2021-05-19

    6.6.2 release

  • 6.6.1 - 2021-05-11

    6.6.1 release

  • 6.6.0 - 2021-05-11

    6.6.0 release

  • 6.5.9 - 2021-04-30

    6.5.9 release

  • 6.5.8 - 2021-04-23

    6.5.8 release

  • 6.5.7 - 2021-04-16

    6.5.7 release

  • 6.5.6 - 2021-04-09

    6.5.6 release

  • 6.5.5 - 2021-04-08

    6.5.5 release

  • 6.5.5-beta.1 - 2021-04-08

    6.5.5-beta.1 release

  • 6.5.4 - 2021-04-05
  • 6.5.3 - 2021-03-31
  • 6.5.2 - 2021-03-30
  • 6.5.1 - 2021-03-29
  • 6.5.0 - 2021-03-05
  • 6.4.15 - 2021-02-18
  • 6.4.14 - 2021-02-17
  • 6.4.12 - 2021-02-16
  • 6.4.11 - 2021-02-06
  • 6.4.10 - 2021-01-29
  • 6.4.9 - 2021-01-28
  • 6.4.8 - 2021-01-22
  • 6.4.7 - 2021-01-21
  • 6.4.6 - 2021-01-20
  • 6.4.5 - 2020-12-18
from swiper GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs