titanscouting / red-alliance-mobile

Red Alliance App in React
2 stars 6 forks source link

[Snyk] Upgrade react-native-screens from 2.16.1 to 2.18.1 #115

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade react-native-screens from 2.16.1 to 2.18.1.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-Y18N-1021887
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1023599
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Command Injection
SNYK-JS-LODASH-1040724
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-INI-1048974
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Insufficient Validation
SNYK-JS-ELECTRON-1070014
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-1064561
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-1064558
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Out-of-bounds Read
SNYK-JS-ELECTRON-1051000
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-1050999
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Insufficient Validation
SNYK-JS-ELECTRON-1050882
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-1050424
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-1049547
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Improper Input Validation
SNYK-JS-ELECTRON-1049323
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Improper Access Control
SNYK-JS-ELECTRON-1049321
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Heap-based Buffer Overflow
SNYK-JS-ELECTRON-1048693
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Improper Validation
SNYK-JS-ELECTRON-1047306
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Mature
Use After Free
SNYK-JS-ELECTRON-1041745
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Mature
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1072471
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Use After Free
SNYK-JS-ELECTRON-1070015
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Information Exposure
SNYK-JS-ELECTRON-1065981
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Improper Input Validation
SNYK-JS-ELECTRON-1064555
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Information Exposure
SNYK-JS-ELECTRON-1050427
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-COLORSTRING-1082939
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react-native-screens from react-native-screens GitHub release notes
Commit messages
Package name: react-native-screens
  • 656935a Release 2.18.1
  • dd5e370 feat: rewrite v4 native-stack to TS (#793)
  • 76ecb0a feat: rewrite indexes to TS (#794)
  • 825649d Release 2.18.0
  • 515abcc docs: add warning about mixing modal types (#835)
  • fd72578 fix: make header subviews subscribe to transition (#820)
  • 5f31cd8 fix: rtl transition without header on iOS (#831)
  • 55dceec Use ReactNativeStyleAttributes to process fontFamily (#823)
  • 49c80a6 feat: add check for isDestroyed (#805)
  • b00a488 fix: restore the proper type for NavigationConfig (#810)
  • 21db3a5 feat: add cancel touchHandler on swipe in nested stack in modal (#784)
  • e9d28f1 feat: change modal logic (#798)
  • 6f6ea86 feat: remove buildscript from main build.gradle (#799)
  • 2447869 feat: enable interaction during transition (#775)
  • 67e287c fix: change babel and metro resolvers logic (#788)
  • 8e2829c refactor: replace deprecated API (#768)
  • 457dca0 Release 2.17.1
  • 4d1d006 fix: exclude examples from bob (#790)
  • b239f6a Release 2.17.0
  • bcd5e4d feat: android orientation management (#679)
  • 377d329 feat: add async container update on ios (#777)
  • ce80133 fix: remove setting tintColor in ios14 (#748)
  • 75bbabf feat: add setting frame in notifyWillAppear (#772)
  • e14d086 update links in RNScreens.podspec (#763)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

πŸ›  Adjust upgrade PR settings

πŸ”• Ignore this dependency or unsubscribe from future upgrade PRs