Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade aws-cdk from 1.128.0 to 2.160.0 #620

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade aws-cdk from 1.128.0 to 2.160.0 #620

wants to merge 1 commit into from

Conversation

WontonSam
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade aws-cdk from 1.128.0 to 2.160.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 348 versions ahead of your current version.

  • The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Prototype Pollution
SNYK-JS-ASYNC-2441827		 159 Proof of Concept
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462		 159 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970		 159 Proof of Concept
critical severity Sandbox Bypass
SNYK-JS-VM2-2309905		 159 Proof of Concept
critical severity Arbitrary Code Execution
SNYK-JS-VM2-2990237		 159 Proof of Concept
critical severity Sandbox Bypass
SNYK-JS-VM2-3018201		 159 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574		 159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 159 Proof of Concept
high severity Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864		 159 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-XML2JS-5414874		 159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		 159 No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JS-NWSAPI-2841516		 159 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873		 159 Proof of Concept
medium severity Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
SNYK-JS-VM2-5537079		 159 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973		 159 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		 159 Proof of Concept
critical severity Sandbox Escape
SNYK-JS-VM2-5415299		 159 Proof of Concept
critical severity Sandbox Escape
SNYK-JS-VM2-5422057		 159 Proof of Concept
critical severity Improper Handling of Exceptional Conditions
SNYK-JS-VM2-5426093		 159 No Known Exploit
critical severity Sandbox Bypass
SNYK-JS-VM2-5537100		 159 Proof of Concept
critical severity Remote Code Execution (RCE)
SNYK-JS-VM2-5772823		 159 Proof of Concept
critical severity Remote Code Execution (RCE)
SNYK-JS-VM2-5772825		 159 Mature
medium severity Server-Side Request Forgery (SSRF)
SNYK-JS-IP-7148531		 159 Proof of Concept
medium severity Reverse Tabnabbing
SNYK-JS-ISTANBULREPORTS-2328088		 159 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856		 159 Proof of Concept
Release notes
Package name: aws-cdk

@snyk-bot
feat: upgrade aws-cdk from 1.128.0 to 2.160.0
aae8226 
Snyk has created this PR to upgrade aws-cdk from 1.128.0 to 2.160.0.

See this package in npm:
aws-cdk

See this project in Snyk:
https://app.snyk.io/org/cachiman/project/18b50fdb-edce-4c2a-bd13-875d2c743c3d?utm_source=github&utm_medium=referral&page=upgrade-pr
@google-cla Google CLA
Copy link

google-cla bot commented Oct 25, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@sonarcloud SonarCloud
Copy link

sonarcloud bot commented Oct 25, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

cloudfront: Support Origin Access Control cdk 2.1.0 synth, diff subcommands fail with "AssertDescription: CDK bootstrap stack version 6 required...". cdk 2.1.0 deploy subcommand succeeds. (aws-events-targets): Add scheduling a Redshift query to "Event Targets for Amazon EventBridge" SNS notifications on stack events (aws-ssm): configure a default value instead of dummy-value-for-parameterName
EbsDeviceProps missing support for setting throughput on GP3 volumes, yet VolumeProps has support for it (aws-cdk): Add session tags when CDK assumes an IAM Role. ec2: InitCommand.argvCommand dedupes its args, causing the wrong command to be generated) core: CfnParser can't correctly parse conditional Tags (cli): cdk watch does not recover if there is an error in cdk stack/app
2 participants
@WontonSam @snyk-bot