Snyk has created this PR to upgrade @jimp/core from 0.22.10 to 0.22.12.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **3 versions** ahead of your current version.
- The recommended version was released on **3 months ago**.
#### Issues fixed by the recommended upgrade:
| | Issue | Score | Exploit Maturity |
:-------------------------:|:-------------------------|:-------------------------|:-------------------------
![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png 'high severity') | Regular Expression Denial of Service (ReDoS) [SNYK-JS-SEMVER-3247795](https://snyk.io/vuln/SNYK-JS-SEMVER-3247795) | **631** | Proof of Concept
![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png 'medium severity') | Missing Release of Resource after Effective Lifetime [SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | **631** | Proof of Concept
![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png 'medium severity') | Prototype Pollution [SNYK-JS-XML2JS-5414874](https://snyk.io/vuln/SNYK-JS-XML2JS-5414874) | **631** | Proof of Concept
Release notes Package name: @jimp/core
</li>
<li>
<b>0.22.11</b> - <a href="https://github.com/jimp-dev/jimp/releases/tag/v0.22.11">2024-02-23</a></br><p>🎉 This release contains work from new contributors! 🎉</p>
</li>
<li>
<b>0.22.11--canary.c55989b.0</b> - 2024-02-23
</li>
<li>
<b>0.22.10</b> - <a href="https://github.com/jimp-dev/jimp/releases/tag/v0.22.10">2023-07-26</a></br><p>🎉 This release contains work from a new contributor! 🎉</p>
Thank you, Zach Stevenson (@ stevezac-osu), for all your work!
This PR was automatically created by Snyk using the credentials of a real user.
![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)
Snyk has created this PR to upgrade @jimp/core from 0.22.10 to 0.22.12.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **3 versions** ahead of your current version. - The recommended version was released on **3 months ago**. #### Issues fixed by the recommended upgrade: | | Issue | Score | Exploit Maturity | :-------------------------:|:-------------------------|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png 'high severity') | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-SEMVER-3247795](https://snyk.io/vuln/SNYK-JS-SEMVER-3247795) | **631** | Proof of Concept ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png 'medium severity') | Missing Release of Resource after Effective Lifetime
[SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | **631** | Proof of Concept ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png 'medium severity') | Prototype Pollution
[SNYK-JS-XML2JS-5414874](https://snyk.io/vuln/SNYK-JS-XML2JS-5414874) | **631** | Proof of Concept
Release notes
Package name: @jimp/core
🎉 This release contains work from a new contributor! 🎉
Thank you, Dathan (@ DLiblik), for all your work!
🚀 Enhancement
🐛 Bug Fix
@ jimp/core
Authors: 3
Thanks for all your work!
❤️ Rob Juurlink (@ kozmoz)
❤️ null@ AnotherPillow
🚀 Enhancement
@ jimp/plugin-print
📝 Documentation
jimp
Authors: 4
Thank you, Zach Stevenson (@ stevezac-osu), for all your work!
🚀 Enhancement
@ jimp/core
Authors: 2
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: