search

godaddy / ekke

Ekke is a test runner for React-Native, it allows you to execute your test code directly on the device enabling you to test in the same environment as your production users.
MIT License
133 stars 9 forks source link

[Snyk] Upgrade node-libs-react-native from 1.0.3 to 1.2.1 #67

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade node-libs-react-native from 1.0.3 to 1.2.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Cryptographic Issues
SNYK-JS-ELLIPTIC-571484		 492/1000
Why? Proof of Concept exploit, CVSS 7.7		 Proof of Concept
Timing Attack
SNYK-JS-ELLIPTIC-511941		 492/1000
Why? Proof of Concept exploit, CVSS 7.7		 No Known Exploit
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		 492/1000
Why? Proof of Concept exploit, CVSS 7.7		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: node-libs-react-native from node-libs-react-native GitHub release notes
Commit messages
Package name: node-libs-react-native
  • a923688 1.2.1
  • 5b38867 Bump buffer from 5.7.1 to 6.0.3 (#29)
  • d424edb Bump elliptic from 6.4.1 to 6.5.3 (#27)
  • 6b844f5 1.2.0
  • a6067cf feat: add vm mock (#26)
  • 9aa1b3a 1.1.0
  • 88caf65 feat: add atob and btoa globals (#25)
  • cd8d78a Rename rn-cli to metro (#22)
  • 13cae5d README: Fix: extraNodeModules -> resolver.extraNodeModules (#16)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs