thumbtack / thumbprint-tokens

Design variables that power Thumbtack’s UI.
https://thumbprint.design/tokens/
Apache License 2.0
9 stars 1 forks source link

[Snyk] Upgrade apollo-server-lambda from 2.14.2 to 2.26.1 #65

Open snyk-bot opened 1 year ago

snyk-bot commented 1 year ago

Snyk has created this PR to upgrade apollo-server-lambda from 2.14.2 to 2.26.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Information Exposure
SNYK-JS-NODEFETCH-2342118
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs