titanscouting / red-alliance-mobile

Red Alliance App in React
2 stars 5 forks source link

[Snyk] Upgrade react-devtools from 4.8.2 to 4.9.0 #71

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade react-devtools from 4.8.2 to 4.9.0.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Heap-based Buffer Overflow
SNYK-JS-ELECTRON-1021884
554/1000
Why? Proof of Concept exploit, Recently disclosed, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react-devtools
  • 4.9.0 - 2020-10-19
  • 4.8.2 - 2020-07-15
from react-devtools GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs