search

kmaida / ng-searchfiltersort

NPM package providing a service for searching, filtering, and sorting arrays of objects in Angular
MIT License
3 stars 0 forks source link

[Snyk] Security upgrade webpack from 2.7.0 to 5.0.0 #18

Open kmaida opened 1 month ago

kmaida commented 1 month ago

snyk-top-banner

Snyk has created this PR to fix 52 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

Issue Score
critical severity Authentication Bypass
SNYK-JS-HAWK-6969142		   786  
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577916		   776  
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577917		   776  
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577918		   776  
high severity Prototype Pollution
SNYK-JS-LODASH-567746		   731  
high severity Arbitrary File Overwrite
SNYK-JS-TAR-174125		   726  
high severity Cryptographic Issues
SNYK-JS-ELLIPTIC-571484		   706  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		   696  
high severity Prototype Pollution
SNYK-JS-ASYNC-2441827		   696  
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727		   696  
high severity Prototype Pollution
SNYK-JS-LODASH-6139239		   696  
high severity Prototype Poisoning
SNYK-JS-QS-3153490		   696  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		   696  
high severity Regular Expression Denial of Service (ReDoS)
npm:sshpk:20180409		   696  
high severity Prototype Pollution
SNYK-JS-INI-1048974		   686  
high severity Prototype Pollution
SNYK-JS-LODASH-450202		   686  
high severity Prototype Pollution
SNYK-JS-LODASH-608086		   686  
high severity Prototype Pollution
SNYK-JS-LODASH-73638		   686  
high severity Prototype Pollution
SNYK-JS-Y18N-1021887		   686  
high severity Prototype Pollution
npm:deep-extend:20180409		   686  
high severity Code Injection
SNYK-JS-LODASH-1040724		   681  
medium severity Server-side Request Forgery (SSRF)
SNYK-JS-REQUEST-3361831		   646  
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909		   646  
medium severity Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873		   646  
medium severity Uninitialized Memory Exposure
npm:stringstream:20180511		   646  
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		   644  
high severity Arbitrary File Write
SNYK-JS-TAR-1579147		   639  
high severity Arbitrary File Write
SNYK-JS-TAR-1579152		   639  
high severity Arbitrary File Write
SNYK-JS-TAR-1579155		   639  
medium severity Prototype Pollution
npm:hoek:20180212		   636  
medium severity Prototype Pollution
npm:lodash:20180130		   636  
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		   631  
high severity Arbitrary File Overwrite
SNYK-JS-TAR-1536528		   624  
high severity Arbitrary File Overwrite
SNYK-JS-TAR-1536531		   624  
high severity Prototype Pollution
SNYK-JS-AJV-584908		   619  
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764		   601  
high severity Improper Verification of Cryptographic Signature
SNYK-JS-BROWSERIFYSIGN-6037026		   589  
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		   589  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		   586  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		   586  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HAWK-2808852		   584  
high severity Arbitrary File Overwrite
SNYK-JS-FSTREAM-174725		   579  
high severity Prototype Pollution
npm:extend:20180424		   579  
medium severity Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		   554  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-73639		   541  
medium severity Timing Attack
SNYK-JS-ELLIPTIC-511941		   509  
medium severity Regular Expression Denial of Service (ReDoS)
npm:tough-cookie:20170905		   509  
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		   506  
low severity Regular Expression Denial of Service (ReDoS)
npm:braces:20180219		   506  
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905		   506  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		   479  
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758		   410  

[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report 📜 Customise PR templates 🛠 Adjust project settings 📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution 🦉 Regular Expression Denial of Service (ReDoS) 🦉 Cryptographic Issues 🦉 More lessons are available in Snyk Learn