search

simde-utc / portail

Nouvelle API du Portail des Assos de l'UTC
GNU General Public License v3.0
14 stars 8 forks source link

[Snyk] Upgrade browser-sync from 2.26.7 to 2.27.7 #381

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade browser-sync from 2.26.7 to 2.27.7.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Access Restriction Bypass
SNYK-JS-XMLHTTPREQUESTSSL-1255647		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Arbitrary Code Injection
SNYK-JS-XMLHTTPREQUESTSSL-1082936		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-1056752		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-1056752		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-OBJECTPATH-1017036		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Insecure Defaults
SNYK-JS-SOCKETIO-1024859		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-OBJECTPATH-1569453		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Denial of Service (DoS)
SNYK-JS-HTTPPROXY-569139		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: browser-sync
  • 2.27.7 - 2021-10-27

    v2.27.7

  • 2.27.6 - 2021-10-26

    v2.27.6

  • 2.27.5 - 2021-07-27

    v2.27.5

  • 2.27.4 - 2021-07-01

    v2.27.4

  • 2.27.3 - 2021-06-26

    v2.27.3

  • 2.27.1 - 2021-06-24

    This release adds a feature to address #1882

    Sometimes you don't want Browsersync to auto-inject it's connection snippet into your HTML - now you can disable it globally via either a CLI param or the new snippet option :)

    browser-sync . --no-snippet

    or in any Browsersync configuration

    const config = {
  snippet: false,
};

    the original request was related to Eleventy usage, so here's how that would look

    eleventyConfig.setBrowserSyncConfig({
  snippet: false,
});
  • 2.26.14 - 2021-01-24

    This is a maintenance release to address 2 security related issues (socket.io & axios)

    Happy Browsersync'in :)

  • 2.26.14-y.2 - 2021-01-24

    v2.26.14-y.2

  • 2.26.14-y.1 - 2021-01-24
  • 2.26.13 - 2020-10-17
  • 2.26.12 - 2020-07-26
  • 2.26.10 - 2020-07-17
  • 2.26.9 - 2020-07-16
  • 2.26.7 - 2019-06-07
from browser-sync GitHub release notes
Commit messages
Package name: browser-sync Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs