search

titanscouting / red-alliance-mobile

Red Alliance App in React
2 stars 5 forks source link

[Snyk] Upgrade react-native-gesture-handler from 1.8.0 to 1.9.0 #99

Closed devksingh4 closed 3 years ago

devksingh4 commented 3 years ago

Snyk has created this PR to upgrade react-native-gesture-handler from 1.8.0 to 1.9.0.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-Y18N-1021887		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1023599		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-INI-1048974		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Out-of-bounds Read
SNYK-JS-ELECTRON-1051000		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Use After Free
SNYK-JS-ELECTRON-1050999		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Insufficient Validation
SNYK-JS-ELECTRON-1050882		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Use After Free
SNYK-JS-ELECTRON-1049547		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Improper Input Validation
SNYK-JS-ELECTRON-1049323		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Improper Access Control
SNYK-JS-ELECTRON-1049321		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Heap-based Buffer Overflow
SNYK-JS-ELECTRON-1048693		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Use After Free
SNYK-JS-ELECTRON-1041745		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Mature
Information Exposure
SNYK-JS-ELECTRON-1050427		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react-native-gesture-handler from react-native-gesture-handler GitHub release notes
Commit messages
Package name: react-native-gesture-handler
  • fa96bb0 Release 1.9.0 (#1233)
  • 6070a36 Add sound to Touchables on Android (#1172)
  • 19cddc5 Allow minDurationMs=0 in LongPressGestureHandler (#1216)
  • 196782c Fix destructuring `ref.props` on the web (#1220)
  • bba5e90 Fix broken link in docs (#1230)
  • 2fb54e4 Fix wrong github link (#1229)
  • b8f0c8e Allow two finger touchpad scrolling on iPadOS (#1128)
  • 1fc98b6 Add fbjs as dependency (#1226)
  • 7564162 Fix typings for enums (#1055)
  • 8cffaca Update Detox and XCode CI version to 12 (#1191)
  • f77326d fix: move Swipeable and DrawerLayout type definition (#955)
  • a94d065 Fix Xcode 12 compatibility (#1193)
  • e6f1164 Fix GestureHandler isWithinBounds top hitslop (#1202)
  • 0f96ac3 Support RN headers in both namespaces on iOS (#1183)
  • 7edb337 make PressGestureHandler web implementation to pass along the move event and fix the propTypes issue (#1098)
  • b19c218 Add note about `onGestureEvent` in docs (#1189)
  • 3639523 Update docs to 0.63 (#1185)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs