search

dhulme / money-manager

Desktop application for managing your personal finances
https://dhulme.uk/money-manager
MIT License
16 stars 4 forks source link

[Snyk] Security upgrade vuetify from 2.6.2 to 2.6.10 #106

Open dhulme opened 2 years ago

dhulme commented 2 years ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

![merge advice](https://app.snyk.io/badges/merge-advice/?package_manager=npm&package_name=vuetify&from_version=2.6.2&to_version=2.6.10&pr_id=80c339fc-bf3a-4d19-b659-a15bbf2251dc&visibility=true&has_feature_flag=false) #### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **623/1000**
**Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 4.6 | Cross-site Scripting (XSS)
[SNYK-JS-VUETIFY-3019858](https://snyk.io/vuln/SNYK-JS-VUETIFY-3019858) | No | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: vuetify The new version differs by 116 commits.
  • fdfb6fc chore(release): publish v2.6.10
  • cd193e4 fix(VSelectList): correct mask class
  • f50a808 chore: update commit message template
  • 89e3850 fix(VDialog): don't try to focus tabindex="-1" or hidden inputs
  • 4468e3c refactor(VSelect): render highlight with vnodes instead of innerHTML
  • ade1434 fix(VCalendar): prevent XSS from eventName function
  • 1be5260 docs(SystemBar): add new promotion
  • 69eefd9 chore(ci): set percy base branch
  • ac45c98 fix(web-types): add support for VDataTable pattern slots (#15694)
  • 464529a fix(VMenu): disabled activatorFixed when attach is enabled (#15709)
  • 381fdb5 docs: use "id" in item-value of autocomplete example (#15740)
  • a455163 chore: update commit message template
  • c8dbfa5 chore(ci): run percy tests on next with nightly build
  • 0c90436 docs(i18n): remove the additional Arabic word for "language" (#15662)
  • 3680756 docs(support.md): implement kintell booking
  • 25a3474 docs(text-fields): clarify that readonly does not affect clearable
  • 7a51ad0 fix(VTextField): only show clear icon on hover or when focused
  • f8ee680 fix(VTextField): prevent tabbing to clear button
  • 170c7d1 chore(release): publish v2.6.9
  • 2cd34b4 fix(VCalendar): add aria roles to monthly calendar (#14640)
  • 299330c fix(VCalendar): forward all bound events to internal elements (#15592)
  • 1e0a4ad fix(VSwitch): only affect control opacity when disabled
  • 0cc43e2 fix(VRadio): change icon color when disabled
  • 322b670 chore: update @ vue/cli and vue-loader
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/dhulme/project/c1fede2a-630f-4030-90bc-4f6da008e44a?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/dhulme/project/c1fede2a-630f-4030-90bc-4f6da008e44a?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"80c339fc-bf3a-4d19-b659-a15bbf2251dc","prPublicId":"80c339fc-bf3a-4d19-b659-a15bbf2251dc","dependencies":[{"name":"vuetify","from":"2.6.2","to":"2.6.10"}],"packageManager":"npm","projectPublicId":"c1fede2a-630f-4030-90bc-4f6da008e44a","projectUrl":"https://app.snyk.io/org/dhulme/project/c1fede2a-630f-4030-90bc-4f6da008e44a?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-VUETIFY-3019858"],"upgrade":["SNYK-JS-VUETIFY-3019858"],"isBreakingChange":false,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore","merge-advice-badge-shown"],"priorityScoreList":[623]}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Cross-site Scripting (XSS)](https://learn.snyk.io/lessons/xss/javascript/?loc=fix-pr)