yurikrupnik / node-playground

playing more
0 stars 0 forks source link

Dependency Dashboard #34

Open renovate[bot] opened 2 years ago

renovate[bot] commented 2 years ago

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

[!WARNING] These dependencies are deprecated:

Datasource Name Replacement PR?
npm babel-eslint Unavailable
npm eslint-loader Unavailable
npm express-graphql Unavailable
npm opn-cli Unavailable

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Detected dependencies

dockerfile
Dockerfile - `node 8.5.0-alpine`
npm
package.json - `babel-polyfill 6.26.0` - `bluebird 3.5.0` - `body-parser 1.17.2` - `classnames 2.2.5` - `cookie-parser 1.4.3` - `core-js 2.6.12` - `express 4.15.4` - `express-graphql 0.6.7` - `express-jwt 6.0.0` - `graphql 0.10.5` - `history 4.6.3` - `isomorphic-style-loader 4.0.0` - `jsonwebtoken 7.4.3` - `node-fetch 2.6.1` - `normalize.css 7.0.0` - `passport 0.4.0` - `passport-facebook 2.1.1` - `pretty-error 2.1.1` - `prop-types 15.5.10` - `query-string 5.0.0` - `react 15.6.1` - `react-dom 15.6.1` - `sequelize 4.44.4` - `serialize-javascript 3.1.0` - `source-map-support 0.4.16` - `sqlite3 3.1.9` - `universal-router 3.2.0` - `whatwg-fetch 2.0.3` - `assets-webpack-plugin 3.5.1` - `autoprefixer 7.1.2` - `babel-cli 6.26.0` - `babel-core 6.26.0` - `babel-eslint 7.2.3` - `babel-jest 20.0.3` - `babel-loader 7.1.2` - `babel-plugin-rewire 1.2.0` - `babel-preset-env 1.6.0` - `babel-preset-react 6.24.1` - `babel-preset-react-optimize 1.0.1` - `babel-preset-stage-2 6.24.1` - `babel-register 6.26.0` - `babel-template 6.26.0` - `babel-types 6.26.0` - `browser-sync 2.18.13` - `chokidar 1.7.0` - `cross-env 5.0.5` - `css-loader 0.28.5` - `enzyme 2.9.1` - `eslint 4.19.1` - `eslint-config-airbnb 15.1.0` - `eslint-config-prettier 2.3.0` - `eslint-import-resolver-node 0.3.1` - `eslint-loader 1.9.0` - `eslint-plugin-css-modules 2.7.4` - `eslint-plugin-flowtype 2.35.0` - `eslint-plugin-import 2.7.0` - `eslint-plugin-jsx-a11y 6.0.2` - `eslint-plugin-prettier 2.2.0` - `eslint-plugin-react 7.3.0` - `file-loader 0.11.2` - `front-matter 2.1.2` - `glob 7.1.2` - `husky 0.14.3` - `identity-obj-proxy 3.0.0` - `jest 20.0.4` - `jest-codemods 0.12.0` - `jscodeshift 0.3.32` - `lint-staged 4.0.3` - `markdown-it 8.3.2` - `mkdirp 0.5.1` - `null-loader 0.1.1` - `opn-cli 3.1.0` - `pixrem 4.0.1` - `pleeease-filters 4.0.0` - `postcss 6.0.9` - `postcss-calc 6.0.0` - `postcss-color-function 4.0.0` - `postcss-custom-media 6.0.0` - `postcss-custom-properties 6.1.0` - `postcss-custom-selectors 4.0.1` - `postcss-flexbugs-fixes 3.2.0` - `postcss-import 10.0.0` - `postcss-loader 2.0.6` - `postcss-media-minmax 3.0.0` - `postcss-nested 2.1.2` - `postcss-nesting 4.1.0` - `postcss-pseudoelements 5.0.0` - `postcss-selector-matches 3.0.1` - `postcss-selector-not 3.0.1` - `prettier 1.5.3` - `raw-loader 0.5.1` - `react-deep-force-update 2.1.0` - `react-error-overlay 1.0.10` - `react-hot-loader 3.0.0-beta.7` - `react-test-renderer 15.6.1` - `rimraf 2.6.1` - `sinon 3.2.1` - `stylelint 8.0.0` - `stylelint-config-standard 17.0.0` - `stylelint-order 0.6.0` - `svg-url-loader 2.1.1` - `url-loader 0.5.9` - `webpack 3.5.5` - `webpack-bundle-analyzer 3.9.0` - `webpack-dev-middleware 1.12.0` - `webpack-hot-middleware 2.18.2` - `webpack-node-externals 1.6.0` - `node >=6.5` - `npm >=3.10`
src/components/Feedback/package.json
src/components/Footer/package.json
src/components/Header/package.json
src/components/Layout/package.json
src/components/Link/package.json
src/components/Navigation/package.json
src/components/Page/package.json
travis
.travis.yml - `node 8` - `node 7` - `node 6`

secure-code-warrior-for-github[bot] commented 2 years ago

Micro-Learning Topic: SQL injection (Detected by phrase)

Matched on "sqli"

What is this? (2min video)

This is probably one of the two most exploited vulnerabilities in web applications and has led to a number of high profile company breaches. It occurs when an application fails to sanitize or validate input before using it to dynamically construct a statement. An attacker that exploits this vulnerability will be able to gain access to the underlying database and view or modify data without permission.

Try this challenge in Secure Code Warrior