raindigi / reaction

Reaction is a customizable, real-time reactive, JavaScript commerce platform.
https://reactioncommerce.com/
GNU General Public License v3.0
0 stars 0 forks source link

[Snyk] Fix for 2 vulnerabilities #82

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Buffer Overflow
SNYK-JS-I18NEXT-575536
Yes No Known Exploit
medium severity Prototype Pollution
SNYK-JS-LODASH-567746
No Proof of Concept
Commit messages
Package name: i18next The new version differs by 250 commits.
  • c9be7ad 19.5.5
  • 41431ba changelog
  • 360c8a9 fix nesting recursion #1479 (#1480)
  • 2108da8 additional interpolation with nesting test case
  • 457768b 19.5.4
  • 93f17d9 changelog
  • 9be2ed6 fix type declarion of exposed EventEmitter#off methods (#1460)
  • c883ddb fix: getDataByLanguage typings & test (#1472)
  • 4bfa7a3 19.5.3
  • 39b09ed changelog
  • e3ad1ad fix: Macedonian plural formula - *11 (11, 111, 211, 311, 58711...) is plural (#1476)
  • 72c5009 19.5.2
  • 6dc82bb changelog
  • 1b78398 fix nesting interpolation with prepended namespace, fixes #1474 (#1475)
  • 67e2569 19.5.1
  • 0e1ba26 rebuild
  • 80a3810 Merge pull request #1471 from i18next/fix-getBestMatchFromCodes
  • ba5c120 getBestMatchFromCodes: use fallbackLng if nothing found, fixes #1470
  • fdb526b update types for supportedLngs
  • aca450f 19.5.0
  • d501e0e rebuild
  • add4e29 add support for lng arrays passed from detectors
  • db90775 rename whitelist to supportedLngs
  • d85dcb6 add optional pretest in hasLoadedNamespace
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic