twilio-labs / function-templates

Twilio Function templates for different Voice, SMS, Video, Chat, Sync, etc use cases
MIT License
346 stars 323 forks source link

[Snyk] Security upgrade @twilio/flex-plugin-scripts from 6.0.3 to 6.2.0 #499

Closed twilio-product-security closed 4 months ago

twilio-product-security commented 9 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - experimental-flex-dialpad/ui-src/package.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **698/1000**
**Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.1 | Cross-site Scripting (XSS)
[SNYK-JS-SERIALIZEJAVASCRIPT-6147607](https://snyk.io/vuln/SNYK-JS-SERIALIZEJAVASCRIPT-6147607) | No | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @twilio/flex-plugin-scripts The new version differs by 165 commits.
  • 2103f9c v6.2.0
  • 01c1028 Merge pull request #839 from twilio/FLEXY-3002
  • 720a595 FLEXY-3002 modified e2e and changelog for v6
  • 6b2f5cd Fixed the login btn selector
  • 2ef07df FLEXY-3002 updated changelog for 6.2.0 release
  • 2a9c5f4 FLEXY-3002 updated changelog for 6.2.0 release
  • 115394d FLEXY-3002 fix tests
  • 36b3f0b FLEXY-3002 fix formatting issue in build script
  • 4be4539 FLEXY-3002 fixed review comments
  • d1ac745 FLEXY-3002 ipv6 compatibility for node 18
  • 7a62db8 FLEXY-3002 ipv6 compatibility for node 18
  • 0970ae5 FLEXY-3002 fixed type issue for compiler
  • a9fbb0c FLEXY-3002 updated vulnerable packages
  • 824c533 FLEXY-3002 updated vulnerable packages
  • 2ef4f45 FLEXY-3002 minor changes on ocde cov and types
  • 27a5fb6 FLEXY-3002 minor changes on ocde cov and types
  • 73dd255 FLEXY-3002 updated test
  • eb5aa55 fix tests for create plugin
  • 94468a3 Merge branch 'FLEXY-3002' of github.com:twilio/flex-plugin-builder into FLEXY-3002
  • 16c6f0e fix tests
  • 0d6fb63 FLEXY-3002 updated test
  • 8c7bc84 Merge branch 'main' into FLEXY-3002
  • 5f33769 FLEXY-3002 reverted back circleci config
  • ad0803c FLEXY-4758 Updated macos resource class (#838)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/twilio-labs/project/101f6492-faa4-461f-ae1c-5b1fb442d0c8?utm_source=github-enterprise&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/twilio-labs/project/101f6492-faa4-461f-ae1c-5b1fb442d0c8?utm_source=github-enterprise&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"2c8075e2-f9fe-4712-8150-28b3b0440fd2","prPublicId":"2c8075e2-f9fe-4712-8150-28b3b0440fd2","dependencies":[{"name":"@twilio/flex-plugin-scripts","from":"6.0.3","to":"6.2.0"}],"packageManager":"npm","projectPublicId":"101f6492-faa4-461f-ae1c-5b1fb442d0c8","projectUrl":"https://app.snyk.io/org/twilio-labs/project/101f6492-faa4-461f-ae1c-5b1fb442d0c8?utm_source=github-enterprise&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-SERIALIZEJAVASCRIPT-6147607"],"upgrade":["SNYK-JS-SERIALIZEJAVASCRIPT-6147607"],"isBreakingChange":false,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[698],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Cross-site Scripting (XSS)](https://learn.snyk.io/lesson/dom-based-xss/?loc=fix-pr)