ministryofjustice / cla_frontend

CLA Front End
http://ministryofjustice.github.io/cla_docs/
MIT License
3 stars 4 forks source link

[Snyk] Fix for 1 vulnerabilities #887

Closed snyk-bot closed 3 months ago

snyk-bot commented 1 year ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-1056752
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: karma The new version differs by 250 commits.
  • 16010eb chore(release): 5.0.8 [skip ci]
  • a409696 chore: remove unused `grunt lint` command (#3515)
  • 47f1cb2 fix(dependencies): update to latest log4js major (#3514)
  • b60391f fix(dependencies): update and unlock socket.io dependency (#3513)
  • 4d49948 chore(release): 5.0.7 [skip ci]
  • f399063 fix: detect type for URLs with query parameter or fragment identifier (#3509)
  • 17b50bc chore(release): 5.0.6 [skip ci]
  • 0cd696f fix(dependencies): update production dependencies (#3512)
  • 7c24a03 chore: fix broken HTML markup in the changelog file (#3507)
  • fdc4f9d refactor(test): remove no debug matching option (#3504)
  • 35d57e9 chore(release): 5.0.5 [skip ci]
  • e99da31 fix(cli): restore command line help contents (#3502)
  • 4f2fe56 chore: add Node 14 to the build matrix (#3501)
  • 100b227 refactor(test): move execKarma into the World (#3500)
  • f375884 refactor(test): reduce execKarma to a reasonable size (#3496)
  • a3d1f11 refactor(test): add common method to start server in background (#3495)
  • e4a5126 refactor(test): write config file in its own steps (#3494)
  • 0bd5c2b refactor(test): adjust sandbox folder location and simplify config logic (#3493)
  • b788f94 refactor(test): extract proxy into a separate Given claim (#3492)
  • 633f833 chore(release): 5.0.4 [skip ci]
  • 810489d refactor(test): migrate Proxy to ES2015 (#3490)
  • fa95fa3 fix(browser): make sure that empty results array is still recognized (#3486)
  • 255bf67 refactor(test): migrate World to ES2015 (#3489)
  • be5db67 chore(test): remove usage of deprecated defineSupportCode (#3488)
See the full diff
Package name: socket.io-client The new version differs by 53 commits.
  • 3020e45 [chore] Release 2.2.0
  • 06e9a4c [chore] Bump dependencies
  • 4a93871 [chore] Update the Makefile
  • eeafa44 [fix] Remove any reference to the `global` variable
  • dfc34e4 [chore] Pin zuul version
  • 2258c03 [chore] Update issue template
  • 8372591 [chore] Release 2.1.1
  • 23000b7 [docs] Add a link to the npm package in the README (#1195)
  • 0fe9439 [fix] Fire an error event on middleware failure for non-root namespace (#1202)
  • 3eb047f [chore] Release 2.1.0
  • afb952d [docs] Add a note about reconnecting after a server-side disconnection
  • 74893d5 [feat] Add a 'binary' flag (#1194)
  • 9701611 [chore] Bump engine.io-client to version 3.2.0 (#1192)
  • 3d8f24e [test] Update travis configuration
  • e27f38b [chore] Restore unminified distribution files (#1191)
  • bb743c4 [docs] Document connected and disconnected socket properties (#1155)
  • f31837f [chore] Bump debug to version 3.1.0
  • ebb0596 [chore] Release 2.0.4
  • 57cee21 [test] Remove IE6 and IE7 tests (#1164)
  • c58ecfc [docs] Add code examples for registered events (#1139)
  • e9ebe36 [docs] Add an example with ES6 import in the README (#1138)
  • 19f2b19 [chore] Release 2.0.3
  • 83fedf5 [docs] Add explicit documentation for websocket transport (#1128)
  • c0da119 [docs] Update documentation (#1124)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

πŸ›  Adjust project settings

πŸ“š Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

πŸ¦‰ Denial of Service (DoS)

sonarcloud[bot] commented 1 year ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication