search

kevinuulong / link-shortener

A serverless URL shortener using Airtable.
https://link.kevinuulong.com
MIT License
2 stars 0 forks source link

[Snyk] Security upgrade netlify-cli from 6.13.2 to 10.0.0 #22

Open kevinuulong opened 6 months ago

kevinuulong commented 6 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **698/1000**
**Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.1 | Cross-site Scripting (XSS)
[SNYK-JS-SERIALIZEJAVASCRIPT-6147607](https://snyk.io/vuln/SNYK-JS-SERIALIZEJAVASCRIPT-6147607) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: netlify-cli The new version differs by 250 commits.
  • d9bb192 chore(main): release 10.0.0 (#4551)
  • 129216e fix(deps): update dependency @ netlify/build to ^27.0.1 (#4548)
  • 59c3670 feat!: add support for Edge Functions (#4550)
  • fbd4510 chore(main): release 9.16.7 (#4545)
  • 47181a4 chore(deps): update dependency verdaccio to v5.9.0 (#4540)
  • d8bc64e fix(deps): update module github.com/aws/aws-lambda-go to v1.30.0 (#4544)
  • 02c8c8a fix(deps): update dependency commander to v9.2.0 (#4541)
  • 15d351e fix(deps): update dependency semver to v7.3.7 (#4539)
  • 647ad4d fix(deps): update dependency stripe to v8.217.0 (#4543)
  • c285dbc fix(deps): update dependency https-proxy-agent to v5.0.1 (#4538)
  • 4ad0b45 fix(deps): update dependency @ types/node to v14.18.13 (#4537)
  • a668861 chore(main): release 9.16.6 (#4530)
  • 1cb5a91 chore(deps): update dependency @ netlify/eslint-config-node to v6 (#4501)
  • 15f34db fix(deps): update dependency @ netlify/build to ^26.5.3 (#4529)
  • 3725113 chore(deps): update codecov/codecov-action action to v3 (#4522)
  • 62e64c4 chore(main): release 9.16.5 (#4525)
  • 3840cc4 fix(deps): update dependency winston to v3.7.2 (#4521)
  • 0f69bb5 chore(deps): update dependency ava to v4.2.0 (#4519)
  • ccd26a5 fix(deps): update dependency semver to v7.3.6 (#4518)
  • 6866549 fix(deps): update dependency stripe to v8.216.0 (#4520)
  • 6a16b6e chore(main): release 9.16.4 (#4517)
  • 1fd0c2c fix(deps): update dependency lambda-local to v2.0.2 (#4443)
  • 84fa9f6 fix(deps): update dependency @ netlify/plugins-list to ^6.19.0 (#4516)
  • e4f6ef0 chore(main): release 9.16.3 (#4514)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/kevinuulong/project/e7756fb3-2ecc-4596-b661-ebb725846e68?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/kevinuulong/project/e7756fb3-2ecc-4596-b661-ebb725846e68?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"88798fb9-4f04-4676-96a0-baef965a7503","prPublicId":"88798fb9-4f04-4676-96a0-baef965a7503","dependencies":[{"name":"netlify-cli","from":"6.13.2","to":"10.0.0"}],"packageManager":"npm","projectPublicId":"e7756fb3-2ecc-4596-b661-ebb725846e68","projectUrl":"https://app.snyk.io/org/kevinuulong/project/e7756fb3-2ecc-4596-b661-ebb725846e68?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-SERIALIZEJAVASCRIPT-6147607"],"upgrade":["SNYK-JS-SERIALIZEJAVASCRIPT-6147607"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[698],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Cross-site Scripting (XSS)](https://learn.snyk.io/lesson/dom-based-xss/?loc=fix-pr)