Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade @googlemaps/google-maps-services-js from 3.3.28 to 3.3.42 #50

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade @googlemaps/google-maps-services-js from 3.3.28 to 3.3.42 #50

wants to merge 1 commit into from

Conversation

gjovs
Copy link
Owner

@gjovs gjovs commented Mar 28, 2024

Snyk has created this PR to upgrade @googlemaps/google-maps-services-js from 3.3.28 to 3.3.42.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 14 versions ahead of your current version.
  • The recommended version was released 4 months ago, on 2023-12-12.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Cross-site Request Forgery (CSRF)
SNYK-JS-AXIOS-6032459		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 Proof of Concept
Prototype Pollution
SNYK-JS-AXIOS-6144788		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 No Known Exploit
Cross-site Request Forgery (CSRF)
SNYK-JS-AXIOS-6032459		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 Proof of Concept
Prototype Pollution
SNYK-JS-AXIOS-6144788		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 No Known Exploit
Use of Weak Hash
SNYK-JS-CRYPTOJS-6028119		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 No Known Exploit
Uncaught Exception
SNYK-JS-ENGINEIO-5496331		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 No Known Exploit
Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 Proof of Concept
Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-5596892		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ZOD-5925617		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 Proof of Concept
Open Redirect
SNYK-JS-EXPRESS-6474509		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 No Known Exploit
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610		 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @googlemaps/google-maps-services-js from @googlemaps/google-maps-services-js GitHub release notes
Commit messages
Package name: @googlemaps/google-maps-services-js
  • 135290d chore(release): 3.3.42 [skip ci]
  • 1be71ac test: fix places/photo test (#1113)
  • 52b256f chore: update workflows to use newer versions (#1046)
  • eedf7b0 build(deps-dev): bump typescript from 5.3.2 to 5.3.3 (#1112)
  • 4400a37 build(deps): bump @ googlemaps/url-signature from 1.0.29 to 1.0.30 (#1110)
  • 374b7b6 build(deps-dev): bump @ types/node from 20.10.3 to 20.10.4 (#1111)
  • 785ff4a build(deps-dev): bump prettier from 3.1.0 to 3.1.1 (#1109)
  • 3701d7e build(deps-dev): bump @ typescript-eslint/eslint-plugin (#1108)
  • e6cd0e7 build(deps-dev): bump @ types/node from 20.10.0 to 20.10.3 (#1102)
  • b8f1741 build(deps-dev): bump @ typescript-eslint/parser from 6.13.0 to 6.13.2 (#1103)
  • 56f5d88 build(deps-dev): bump eslint from 8.54.0 to 8.55.0 (#1101)
  • 4b6f1ae build(deps-dev): bump eslint-config-prettier from 9.0.0 to 9.1.0 (#1099)
  • 9212502 build(deps-dev): bump typescript from 5.2.2 to 5.3.2 (#1097)
  • 40030b0 build(deps-dev): bump @ types/node from 20.9.2 to 20.10.0 (#1096)
  • 1c42682 build(deps-dev): bump @ typescript-eslint/parser from 6.12.0 to 6.13.0 (#1095)
  • 04ce099 build(deps-dev): bump nock from 13.3.8 to 13.4.0 (#1094)
  • cf24d22 build(deps-dev): bump typedoc from 0.25.3 to 0.25.4 (#1093)
  • d2b74f1 build(deps-dev): bump @ types/jest from 29.5.7 to 29.5.10 (#1092)
  • 67c0e48 build(deps-dev): bump eslint from 8.53.0 to 8.54.0 (#1090)
  • 031213f build(deps): bump axios from 1.6.1 to 1.6.2 (#1091)
  • de1a052 build(deps-dev): bump @ typescript-eslint/eslint-plugin (#1088)
  • 895dbd3 build(deps-dev): bump @ typescript-eslint/parser from 6.11.0 to 6.12.0 (#1089)
  • d5d5521 build(deps-dev): bump @ types/node from 20.9.0 to 20.9.2 (#1087)
  • 80697e6 build(deps-dev): bump @ typescript-eslint/eslint-plugin (#1085)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@gjovs @snyk-bot