search

wise-team / steem-wise-voter-page

Vote delegation system for STEEM blockchain: html tool for plenipotents to vote on behalf of delegator
MIT License
12 stars 4 forks source link

[Snyk] Fix for 2 vulnerabilities #59

Closed Jblew closed 2 years ago

Jblew commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 No Proof of Concept
high severity 753/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.2		 Command Injection
SNYK-JS-LODASH-1040724		 No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: bootstrap-vue The new version differs by 250 commits.
  • e42ef07 Merge pull request #3862 from bootstrap-vue/dev
  • 5930f04 chore: bump version and update changelog (#4017)
  • 72ceef8 chore: coverage fixes for babel dep upgrades (#4034)
  • efe84a1 Revert "chore(deps): update devdependency @ nuxtjs/pwa to ^3.0.0-beta.17 (#4026)" (#4031)
  • 4b8a8c7 fix(docs): hading before margin (#4029)
  • cbeeef9 feat(b-table, b-table-lite): add new scoped slot `custom-foot` to allow user to create their own table footer (closes #3960) (#4027)
  • 81efb89 fix(b-dropdown-*): ensure class bindings are placed on root element for all dropdown sub-components (closes #4022) (#4024)
  • c7cb16f fix(b-table, b-table-lite): use `:key` for row details based on the primary key value if available (#4025)
  • 2012d07 chore(deps): update devdependency @ nuxtjs/pwa to ^3.0.0-beta.17 (#4026)
  • 6aa16b8 chore(deps): update devdependency eslint-plugin-jest to ^22.17.0 (#4023)
  • 64735a3 chore: tooltip/popover directives execute title/content if function before each show (#4020)
  • 10ff04a chore(deps): update devdependency eslint-plugin-node to v10 (#4019)
  • acb34e7 chore(docs): minor adjustments to the table docs (#4016)
  • 78c604c perf(b-table): cache cell slot names each render cycle (addresses #4008) (#4011)
  • 5855330 docs(router-links): add more details to `active-class` and `exact-active-class` props (closes #4012) (#4013)
  • 113b802 chore(docs): better ARIA compliant `b-nav` + `b-card` examples (#4006)
  • 332b79f fix(modal): fix scroll to top issue when modal has `no-fade` set (#4004)
  • 3aa78fd chore(deps): update devdependency eslint-config-prettier to ^6.2.0 (#4005)
  • dfabe51 docs(b-nav): add example markup for using vue-router/nuxt-child (closes #3999) (#4000)
  • 464d257 feat(dropdown): add `role=presentation` to `<li>` elements for improved a11y (#3996)
  • 484f012 chore(deps): update devdependency cross-env to ^5.2.1 (#3995)
  • e05cc0d chore(pagination): change `role="none presentation"` to `role="presentation"` (closes #2921) (#3993)
  • f6f73c7 feat(b-table, b-table-lite): use `aria-details` rather than `aria-describedby` when details row showing (addresses #3801) (#3992)
  • 444d8b0 chore(docs): remove duplicate IDs from dropdown examples (#3991)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic