ibm-ecosystem-engineering / ibm-gsi-cloudnative-journey

Cloud Native Learning Journey to enable GSI Partners to learn cloud native development with the IBM Enterprise Sandbox
https://ibm-ecosystem-lab.github.io/ibm-gsi-cloudnative-journey/
Apache License 2.0
4 stars 26 forks source link

[Snyk] Upgrade gatsby-theme-carbon from 1.29.2 to 1.30.2 #319

Open mjperrins opened 1 week ago

mjperrins commented 1 week ago

snyk-top-banner

Snyk has created this PR to upgrade gatsby-theme-carbon from 1.29.2 to 1.30.2.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Improper Input Validation
SNYK-JS-URLPARSE-2407770
586 Proof of Concept
medium severity Open Redirect
SNYK-JS-URLPARSE-1533425
586 Proof of Concept
medium severity Access Restriction Bypass
SNYK-JS-URLPARSE-2401205
586 Proof of Concept
medium severity Authorization Bypass
SNYK-JS-URLPARSE-2407759
586 Proof of Concept
medium severity Authorization Bypass Through User-Controlled Key
SNYK-JS-URLPARSE-2412697
586 Proof of Concept
Release notes
Package name: gatsby-theme-carbon from gatsby-theme-carbon GitHub release notes

[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information: