search

itispaleocapa / paleobooks

Repository per il progetto paleobooks (app libri usati esperia)
GNU General Public License v3.0
2 stars 0 forks source link

[Snyk] Upgrade react-scripts from 3.4.1 to 3.4.4 #20

Open cristianlivella opened 2 years ago

cristianlivella commented 2 years ago

Snyk has created this PR to upgrade react-scripts from 3.4.1 to 3.4.4.

merge advice As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
:sparkles: Snyk has automatically assigned this pull request, set who gets assigned.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Arbitrary Code Injection
SNYK-JS-SERIALIZEJAVASCRIPT-570062		 706/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7		 Proof of Concept
Prototype Pollution
SNYK-JS-OBJECTPATH-1585658		 706/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7		 No Known Exploit
Prototype Pollution
SNYK-JS-OBJECTPATH-1017036		 706/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7		 Proof of Concept
Prototype Pollution
SNYK-JS-YARGSPARSER-560381		 706/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7		 Proof of Concept
Open Redirect
SNYK-JS-URLPARSE-1533425		 706/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7		 Proof of Concept
Denial of Service (DoS)
SNYK-JS-SOCKJS-575261		 706/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7		 Proof of Concept
Prototype Pollution
SNYK-JS-OBJECTPATH-1569453		 706/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react-scripts
  • 3.4.4 - 2020-10-20
  • 3.4.3 - 2020-08-12
  • 3.4.2 - 2020-08-11
  • 3.4.1 - 2020-03-21
from react-scripts GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs