As these vulnerabilities are now publicly known, attackers can try to use them against your application, making fixing them a matter of urgency.
To help expedite the fix, Snyk created this pull request with the necessary changes to address the vulnerabilities.
This pull request includes:
package.json scripts and a Snyk policy (.snyk) file, which patch the vulnerabilities that can't be upgraded away.
You can read more about Snyk's upgrade and patch logic in Snyk's documentation. Each vulnerability advisory includes information about the vulnerable versions, and direct links to the available patches.
Note that this pull request only addresses the newly disclosed vulnerabilities mentioned above.
See the Snyk test report to review and remediate the full list of vulnerable dependencies.
Please check the changes in this PR to ensure they won't cause issues with your application.
The following newly disclosed vulnerabilities impact one or more of the npm packages this project uses:
As these vulnerabilities are now publicly known, attackers can try to use them against your application, making fixing them a matter of urgency.
To help expedite the fix, Snyk created this pull request with the necessary changes to address the vulnerabilities.
This pull request includes:
package.jsonscripts and a Snyk policy (.snyk) file, which patch the vulnerabilities that can't be upgraded away.You can read more about Snyk's upgrade and patch logic in Snyk's documentation. Each vulnerability advisory includes information about the vulnerable versions, and direct links to the available patches.
Note that this pull request only addresses the newly disclosed vulnerabilities mentioned above.
See the Snyk test report to review and remediate the full list of vulnerable dependencies.
Please check the changes in this PR to ensure they won't cause issues with your application.
Stay secure,
The Snyk team