Closed johannesleite closed 2 weeks ago
Latest commit: 0f46be182a882b5063c735d97ef2d8d82d0e6ef9
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
Click here to learn what changesets are, and how to add one.
Click here if you're a maintainer who wants to add a changeset to this PR
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json⚠️ Warning
``` Failed to update the package-lock.json, please update manually before merging. ```**Why?** Confidentiality impact: High, Integrity impact: None, Availability impact: None, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: High, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 98, Impact: 5.99, Likelihood: 2.61, Score Version: V5 | Improper Access Control
[SNYK-JS-VITE-6531286](https://snyk.io/vuln/SNYK-JS-VITE-6531286) | No | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: vite
The new version differs by 9 commits.