geekdada / yasd

Surge Web Dashboard
https://yasd.royli.dev
MIT License
275 stars 15 forks source link

[Snyk] Security upgrade snyk from 1.424.4 to 1.425.4 #4

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 472/1000
Why? Proof of Concept exploit, CVSS 7.3
Prototype Pollution
SNYK-JS-Y18N-1021887
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

πŸ›  Adjust project settings

πŸ“š Read more about Snyk's upgrade and patch logic

vercel[bot] commented 3 years ago

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

πŸ” Inspect: https://vercel.com/dada/yasd/m3bqb7l1s
βœ… Preview: https://yasd-git-snyk-fix-0dd9f8914af9181635ca64101b94fbdd.dada.vercel.app

codecov[bot] commented 3 years ago

Codecov Report

Merging #4 (a09ac6f) into master (a1f9567) will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@          Coverage Diff           @@
##           master      #4   +/-   ##
======================================
  Coverage    6.04%   6.04%           
======================================
  Files          42      42           
  Lines         926     926           
  Branches      229     234    +5     
======================================
  Hits           56      56           
  Misses        870     870           

Continue to review full report at Codecov.

Legend - Click here to learn more Ξ” = absolute <relative> (impact), ΓΈ = not affected, ? = missing data Powered by Codecov. Last update a1f9567...a09ac6f. Read the comment docs.