titanscouting / red-alliance-mobile

Red Alliance App in React
2 stars 6 forks source link

[Snyk] Upgrade: appcenter, appcenter-analytics, appcenter-crashes #163

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on
appcenter
from 4.1.0 to 4.3.0
2 versions ahead of your current version 23 days ago
on 2021-09-21
appcenter-analytics
from 4.1.0 to 4.3.0
2 versions ahead of your current version 23 days ago
on 2021-09-21
appcenter-crashes
from 4.1.0 to 4.3.0
2 versions ahead of your current version 23 days ago
on 2021-09-21

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1023599
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TMPL-1583443
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Command Injection
SNYK-JS-LODASH-1040724
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Improper Input Validation
SNYK-JS-XMLDOM-1534562
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit
XML External Entity (XXE) Injection
SNYK-JS-XMLDOM-1084960
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1072471
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PROMPTS-1729737
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-COLORSTRING-1082939
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: appcenter
  • 4.3.0 - 2021-09-21

    Version 4.3.0

    App Center

    Android/iOS

    • [Feature] Improved AES token encryption algorithm using Encrypt-then-MAC data authentication approach.

    App Center Crashes

    Android/iOS

    • [Feature] Add support for tracking handled errors with Crashes.trackError.

    iOS

    • [Fix] Fix build failure on Xcode 13, because of warning completion handler is never used. Only observable when SDK is integrated as source code. Workaround: Set Treat Warnings as Errors to No in target's build settings.
    • [Improvement] Update PLCrashReporter to 1.10.0.
  • 4.2.0 - 2021-06-28

    Version 4.2.0

    App Center

    • [Feature] Add a AppCenter.setNetworkRequestsAllowed(bool) API to block any network requests without disabling the SDK.

    iOS

    • [Fix] Fix umbrella header warnings in Xcode 12.5.

    Android

    • [Fix] Remove old support libraries for compatibility with apps without enabled Jetifier tool.

    App Center Crashes

    iOS

    • [Fix] Fix error nullability in crashes delegate.
    • [Fix] Merge the device information from the crash report with the SDK's device information in order to fix some time sensitive cases where the reported application information was incorrect.
    • [Improvement] Update PLCrashReporter to 1.9.0.
  • 4.1.0 - 2021-03-29

    Version 4.1.0

    App Center

    iOS

    • [Feature] Use XCFramework format for the AppCenterReactNativeShared pod, it allows running the SDK on Apple Silicon simulators.
    • [Feature] Support Mac Catalyst. Cocoapods 1.10.1+ is required.
    • [Improvement] Use ASWebAuthenticationSession for authentication on iOS 12 or later.

    App Center Crashes

    Android

    • [Fix] Fix formatting of stack trace in the ErrorReport.

from appcenter GitHub release notes
Package name: appcenter-analytics
  • 4.3.0 - 2021-09-21

    Version 4.3.0

    App Center

    Android/iOS

    • [Feature] Improved AES token encryption algorithm using Encrypt-then-MAC data authentication approach.

    App Center Crashes

    Android/iOS

    • [Feature] Add support for tracking handled errors with Crashes.trackError.

    iOS

    • [Fix] Fix build failure on Xcode 13, because of warning completion handler is never used. Only observable when SDK is integrated as source code. Workaround: Set Treat Warnings as Errors to No in target's build settings.
    • [Improvement] Update PLCrashReporter to 1.10.0.
  • 4.2.0 - 2021-06-28

    Version 4.2.0

    App Center

    • [Feature] Add a AppCenter.setNetworkRequestsAllowed(bool) API to block any network requests without disabling the SDK.

    iOS

    • [Fix] Fix umbrella header warnings in Xcode 12.5.

    Android

    • [Fix] Remove old support libraries for compatibility with apps without enabled Jetifier tool.

    App Center Crashes

    iOS

    • [Fix] Fix error nullability in crashes delegate.
    • [Fix] Merge the device information from the crash report with the SDK's device information in order to fix some time sensitive cases where the reported application information was incorrect.
    • [Improvement] Update PLCrashReporter to 1.9.0.
  • 4.1.0 - 2021-03-29

    Version 4.1.0

    App Center

    iOS

    • [Feature] Use XCFramework format for the AppCenterReactNativeShared pod, it allows running the SDK on Apple Silicon simulators.
    • [Feature] Support Mac Catalyst. Cocoapods 1.10.1+ is required.
    • [Improvement] Use ASWebAuthenticationSession for authentication on iOS 12 or later.

    App Center Crashes

    Android

    • [Fix] Fix formatting of stack trace in the ErrorReport.

from appcenter-analytics GitHub release notes
Package name: appcenter-crashes
  • 4.3.0 - 2021-09-21

    Version 4.3.0

    App Center

    Android/iOS

    • [Feature] Improved AES token encryption algorithm using Encrypt-then-MAC data authentication approach.

    App Center Crashes

    Android/iOS

    • [Feature] Add support for tracking handled errors with Crashes.trackError.

    iOS

    • [Fix] Fix build failure on Xcode 13, because of warning completion handler is never used. Only observable when SDK is integrated as source code. Workaround: Set Treat Warnings as Errors to No in target's build settings.
    • [Improvement] Update PLCrashReporter to 1.10.0.
  • 4.2.0 - 2021-06-28

    Version 4.2.0

    App Center

    • [Feature] Add a AppCenter.setNetworkRequestsAllowed(bool) API to block any network requests without disabling the SDK.

    iOS

    • [Fix] Fix umbrella header warnings in Xcode 12.5.

    Android

    • [Fix] Remove old support libraries for compatibility with apps without enabled Jetifier tool.

    App Center Crashes

    iOS

    • [Fix] Fix error nullability in crashes delegate.
    • [Fix] Merge the device information from the crash report with the SDK's device information in order to fix some time sensitive cases where the reported application information was incorrect.
    • [Improvement] Update PLCrashReporter to 1.9.0.
  • 4.1.0 - 2021-03-29

    Version 4.1.0

    App Center

    iOS

    • [Feature] Use XCFramework format for the AppCenterReactNativeShared pod, it allows running the SDK on Apple Silicon simulators.
    • [Feature] Support Mac Catalyst. Cocoapods 1.10.1+ is required.
    • [Improvement] Use ASWebAuthenticationSession for authentication on iOS 12 or later.

    App Center Crashes

    Android

    • [Fix] Fix formatting of stack trace in the ErrorReport.

from appcenter-crashes GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs