search

titanscouting / red-alliance-mobile

Red Alliance App in React
2 stars 6 forks source link

[Snyk] Upgrade @react-native-firebase/messaging from 11.4.1 to 11.5.0 #165

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade @react-native-firebase/messaging from 11.4.1 to 11.5.0.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1023599		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TMPL-1583443		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Command Injection
SNYK-JS-LODASH-1040724		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1072471		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PROMPTS-1729737		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-COLORSTRING-1082939		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @react-native-firebase/messaging from @react-native-firebase/messaging GitHub release notes
Commit messages
Package name: @react-native-firebase/messaging
  • 0217bff chore(release): release packages
  • 8679b17 test(admob, e2e): disable ad loading on android in E2E
  • f4c2fa6 test(android, jacoco): add native coverage report, call it in e2e
  • fbab915 test(detox): cleanly close the test session, fetch coverage file
  • 6ef437c test(android, jacoco): dump coverage file after running Detox tests
  • 42961f2 test(android, jacoco): configure app and modules for offline coverage instrumentation
  • 2307cd3 test(jet): check device before attempting to use it
  • 94f5ba6 test(detox): cleaned up version of detox patch
  • 4637332 fix(messaging, android): avoid using rn61+ symbol
  • d931b48 fix(app, json-schema): admob_delay_app_measurement_init type is boolean (#5297)
  • a86b08d test(docs): run docs CI workflow on main branch push, or manual
  • 98ed88f test(docs, lint): add markdown lint check to docs CI workflow (#5303)
  • 8b7fc94 style(docs): format documentation using prettier (#5302)
  • 87840c3 docs(admob, consent): admob_app_id config key gone, note platform-specific keys (#5298)
  • 34344dd test(firestore): sync latitude error message test w/new message
  • f9909fa fix(firestore): Incorrect error message for GeoPoint latitude out of range
  • 9a5a21f fix(admob): mark BannerAd callbacks as optional
  • 3b48240 test: more cache key/restore-keys work
  • 221eb50 chore: update javascript dependencies
  • faf881b docs(firestore): remove await before transaction.update (#5273)
  • 776a39a docs(CHANGELOG) - note that 11.4.x currently requires react-native >= 0.61.0
  • 921bd4c test: improve caching in workflows
  • 0b62d5a fix(ios): admob shows only non-personalized ads (#5262)
  • 0243048 docs(analytics): correct logSelectItem documentation (#5253)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs