yurikrupnik / mussia8

Mussia8 base project monorepo poc for api gateway
alfred-lake.vercel.app
MIT License
0 stars 0 forks source link

[Snyk] Security upgrade firebase-admin from 9.11.1 to 10.0.2 #245

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Open Redirect
SNYK-JS-NODEFORGE-2330875
Yes Proof of Concept
medium severity 601/1000
Why? Recently disclosed, Has a fix available, CVSS 6.3
Prototype Pollution
SNYK-JS-NODEFORGE-2331908
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

πŸ›  Adjust project settings

πŸ“š Read more about Snyk's upgrade and patch logic

vercel[bot] commented 2 years ago

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployments, click below or on the icon next to each commit.

alfred – ./packages/ui/clients/alfred

πŸ” Inspect: https://vercel.com/yurikrupnik/alfred/GeDmi1sudpinLm6eTj6AKP4AgVZn
βœ… Preview: https://alfred-git-snyk-fix-c95f5891f95da39df35c18f9-7dfc18-yurikrupnik.vercel.app

batman – ./packages/ui/clients/batman

πŸ” Inspect: https://vercel.com/yurikrupnik/batman/GGnD2MdBWg8rAnmvUkxrCU4EiaSj
βœ… Preview: https://batman-git-snyk-fix-c95f5891f95da39df35c18f9-be6e1a-yurikrupnik.vercel.app

vercel[bot] commented 2 years ago

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployments, click below or on the icon next to each commit.

batman – ./packages/ui/clients/batman

πŸ” Inspect: https://vercel.com/yurikrupnik/batman/BVjAZRPUbWRwMgczTHBevmQCcczV
βœ… Preview: In Progress

secure-code-warrior-for-github[bot] commented 2 years ago

Micro-Learning Topic: Open redirect (Detected by phrase)

Matched on "Open Redirect"

What is this? (2min video)

This vulnerability refers to the ability of an attacker to arbitrarily perform a redirection (external) or forward (internal) against the system. It arises due to insufficient validation or sanitisation of inputs used to perform a redirect or forward and may result in privilege escalation (in the case of a forward) or may be used to launch phishing attacks against users (in the case of redirects).

Try this challenge in Secure Code Warrior