netlify[bot]
commented
1 year ago Deploy Preview for otlio ready!
| Name | Link |
|---|---|
| Latest commit | d91be172456343890695700cc28b73215ec8a407 |
| Latest deploy log | https://app.netlify.com/sites/otlio/deploys/64c9a7365f269e0008d3bafd |
| Deploy Preview | https://deploy-preview-425--otlio.netlify.app |
| Preview on mobile | Toggle QR Code...Use your smartphone camera to open QR code link. |
To edit notification comments on pull requests, go to your Netlify site configuration.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade dompurify from 2.4.5 to 2.4.7.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **2 versions** ahead of your current version. - The recommended version was released **22 days ago**, on 2023-07-11. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:-------------------------
[SNYK-JS-SEMVER-3247795](https://snyk.io/vuln/SNYK-JS-SEMVER-3247795) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | Proof of Concept
[SNYK-JS-SEMVER-3247795](https://snyk.io/vuln/SNYK-JS-SEMVER-3247795) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | Proof of Concept
[SNYK-JS-TOUGHCOOKIE-5672873](https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | Proof of Concept
[SNYK-JS-WORDWRAP-3149973](https://snyk.io/vuln/SNYK-JS-WORDWRAP-3149973) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: dompurify
-
2.4.7 - 2023-07-11
- Fixed a licensing issue spotted and reported by @ george-thomas-hill
-
2.4.6 - 2023-07-10
- Fixed a bypass in jsdom 22 in case the
-
2.4.5 - 2023-03-01
- Fixed a problem with improper reset of custom HTML options, thanks @ ammaraskar
from dompurify GitHub release notesnoframeselement is permitted, thanks @ leeNCommit messages
Package name: dompurify
- ef731c0 chore: Preparing 2.4.7. release
- 5b7dff9 chore: Preparing 2.4.6 release
- a01c083 Fix: addressed a bypass on jsdom 22 when noframes tag is allowed
Compare**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: