Skip to content

[Snyk] Security upgrade @pattern-lab/uikit-workshop from 5.14.0 to 5.15.5#353

Open
riteshgurung wants to merge 1 commit into1.0.xfrom
snyk-fix-2fc244fcbf8c7d2d9bfd32d8df32f89c
Open

[Snyk] Security upgrade @pattern-lab/uikit-workshop from 5.14.0 to 5.15.5#353
riteshgurung wants to merge 1 commit into1.0.xfrom
snyk-fix-2fc244fcbf8c7d2d9bfd32d8df32f89c

Conversation

@riteshgurung
Copy link
Copy Markdown
Contributor

@riteshgurung riteshgurung commented Nov 25, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • pattern-lab/package.json
    • pattern-lab/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 No Proof of Concept
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905		 No Proof of Concept
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-HTMLMINIFIER-3091181		 No Proof of Concept
medium severity 646/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5		 Out-of-Bounds
SNYK-JS-NODESASS-535498		 No Proof of Concept
high severity 761/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.8		 NULL Pointer Dereference
SNYK-JS-NODESASS-535500		 No Proof of Concept
medium severity 536/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 4.3		 Out-of-bounds Read
SNYK-JS-NODESASS-540958		 No Proof of Concept
medium severity 536/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 4.3		 Uncontrolled Recursion
SNYK-JS-NODESASS-540964		 No Proof of Concept
medium severity 646/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5		 Denial of Service (DoS)
SNYK-JS-NODESASS-540978		 No Proof of Concept
medium severity 536/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 4.3		 NULL Pointer Dereference
SNYK-JS-NODESASS-540992		 No Proof of Concept
medium severity 646/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5		 Out-of-Bounds
SNYK-JS-NODESASS-540998		 No Proof of Concept
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-NODESASS-541000		 No No Known Exploit
medium severity 646/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5		 Out-of-bounds Read
SNYK-JS-NODESASS-541002		 No Proof of Concept
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-NTHCHECK-1586032		 No Proof of Concept
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640		 No Proof of Concept
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Improper Input Validation
SNYK-JS-POSTCSS-5926692		 No No Known Exploit
medium severity 646/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5		 Server-side Request Forgery (SSRF)
SNYK-JS-REQUEST-3361831		 No Proof of Concept
medium severity 646/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5		 Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873		 No Proof of Concept
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JS-TRIMNEWLINES-1298042		 No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251		 No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Prototype Pollution
SNYK-JS-UNSETVALUE-2400660		 No No Known Exploit
medium severity 601/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6		 Prototype Pollution
SNYK-JS-YARGSPARSER-560381		 No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @pattern-lab/uikit-workshop The new version differs by 87 commits.
  • 627d6a3 [skip travis] chore(release): publish v5.15.5
  • c9e4151 [skip travis] chore(release): publish v5.15.4
  • 108eb43 Update babel config
  • 7f37e9d fix: corrected some github urls (#1388)
  • b86bf0a chore: code optimizations (#1387)
  • 91d2d3e refactor: updated lerna dependency (#1382)
  • 62901a3 refactor: moved dependencies to devDependencies @ uikit-workshop (#1381)
  • 49cd8f8 refactor: updated 11ty dependencies (#1383)
  • 2939561 refactor: moved dependencies to devDependencies @ cli (#1384)
  • 6fa630e feat: define initial viewport (#1386)
  • 8fb9fb4 refactor: updated http-auth dependency (#1379)
  • e284703 chore: adding simple pattern descriptions (#1378)
  • 57aad3d [skip travis] chore(release): publish v5.15.3
  • a75ee0d refactor: updated our redux version (#1374)
  • 1ebcd53 Includes additional twig syntax featires (#1367)
  • 7c66f8a fix(handlebars-demo): move and modify the icon files (#1377)
  • cfa74c0 feat(vs-code): added recommendations (#1375)
  • 82c5592 refactor: replace node-sass by sass (#1373)
  • 57efccb feat: ensure consistent line endings across files (#1372)
  • d7b428c refactor(docs): added forked plugin to the list (#1371)
  • 384dc89 fix(docs): tiles z-index to not overlay the menu anymore (#1370)
  • acca120 [skip travis] chore(release): publish v5.15.2
  • 3ce13ab fix(core): Subgroup cannot be hidden (#1368)
  • 7495275 refactor: optimized engines directory retrieval #1359 (#1364)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 NULL Pointer Dereference
🦉 Uncontrolled Recursion
🦉 More lessons are available in Snyk Learn

@snyk-bot
fix: pattern-lab/package.json & pattern-lab/package-lock.json to redu…
354e377 
…ce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
- https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905
- https://snyk.io/vuln/SNYK-JS-HTMLMINIFIER-3091181
- https://snyk.io/vuln/SNYK-JS-NODESASS-535498
- https://snyk.io/vuln/SNYK-JS-NODESASS-535500
- https://snyk.io/vuln/SNYK-JS-NODESASS-540958
- https://snyk.io/vuln/SNYK-JS-NODESASS-540964
- https://snyk.io/vuln/SNYK-JS-NODESASS-540978
- https://snyk.io/vuln/SNYK-JS-NODESASS-540992
- https://snyk.io/vuln/SNYK-JS-NODESASS-540998
- https://snyk.io/vuln/SNYK-JS-NODESASS-541000
- https://snyk.io/vuln/SNYK-JS-NODESASS-541002
- https://snyk.io/vuln/SNYK-JS-NTHCHECK-1586032
- https://snyk.io/vuln/SNYK-JS-POSTCSS-1255640
- https://snyk.io/vuln/SNYK-JS-POSTCSS-5926692
- https://snyk.io/vuln/SNYK-JS-REQUEST-3361831
- https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873
- https://snyk.io/vuln/SNYK-JS-TRIMNEWLINES-1298042
- https://snyk.io/vuln/SNYK-JS-UGLIFYJS-1727251
- https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660
- https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@riteshgurung @snyk-bot