search

wise-team / steem-wise-voter-page

Vote delegation system for STEEM blockchain: html tool for plenipotents to vote on behalf of delegator
MIT License
12 stars 4 forks source link

[Snyk] Security upgrade vuex-persistedstate from 2.5.4 to 2.7.0 #58

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		 Prototype Pollution
SNYK-JS-SHVL-1054936		 No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: vuex-persistedstate The new version differs by 33 commits.
  • 471cf83 v2.7.0 🎉
  • f5e5dcb Use latest LTS version when testing
  • b036e2b Update shvl to its latest version
  • 30f6b62 Update deepmerge to its latest version
  • d49a824 Add contributors to README
  • a0427e5 Add contributing guidelines
  • 2975b4b Update issue and pr templates
  • 5bb6698 Use default prettier configuration
  • d475364 Update all dev dependencies to their latest versions
  • a6ebae0 Handle dynamically registered modules (#225)
  • ac20b27 #166 Add rehydrated callback (#207)
  • 1f202f0 v2.6.0
  • c48106a Made readme consistent with other OSS projects
  • d849ae6 Remove year from README
  • 9dbaba6 Update README.md (#219)
  • 6f48b70 feat: Update d.ts (#220)
  • 83e56ee Example of encrypted local storage (#217)
  • 3e7bc9f Add missing arrayMerger interface (#186)
  • 34e972c Update docs (#181)
  • 8b38fc1 Fix package name in Readme (#179)
  • ff465c3 Mention unpkg umd builds in README
  • 7858993 Updated all dependencies to their latest versions
  • 8ef0bdd readme: Improve Nuxt.js example to support nuxt generate (#170)
  • e2c24d2 chore(docs): correct badge link
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic