Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #128

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

negue
Copy link
Owner

@negue negue commented Dec 19, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @nx/angular The new version differs by 250 commits.
  • 15f558d docs(core): move global & nx wrapper to installation page
  • 96b8bdb docs(core): move task related recipes into task section
  • 68064b5 docs(core): improve core features and concepts
  • 470a0a3 fix(misc): update re-exports when updating imports during move (#19637)
  • b90aab6 fix(vue): default unit test to vitest (#19746)
  • c076521 docs(core): contributing guide for docs (#19738)
  • 40a946a fix(core): fix convert to monorepo eslint issue (#19713)
  • 85bda9a fix(react): fix creating a react library with cwd (#19721)
  • f619c80 chore(repo): update nx to 17.0.0-rc.2 (#19740)
  • e887671 fix(vue): downgrade @ vue/eslint-config-prettier to work with prettier v2 (#19741)
  • 90e0795 fix(storybook): update to patch 7.5.1 webpackStatsJson fix (#19736)
  • fb37e0d docs(misc): Add Manage Library Versions recipe (#19666)
  • 2ad467c fix(js): use normalized tsConfig path for generating tmpTscConfig (#18794)
  • d798126 fix(js): Avoid `@ babel/preset-env` warning in js/babel.ts (#14772)
  • 93e1e1b chore(repo): update post install script to manually check for rust version less than 1.70 (#19739)
  • ef4ffe9 fix(linter): add migration for eslint config prettier (#19732)
  • e56dd31 fix(js): update esbuild version (#19728)
  • 7caae07 fix(angular): federate-module should support as-provided for new remotes (#19731)
  • 1d647d4 fix(nx-dev): fix broken linter icon (#19735)
  • b773744 docs(nx-cloud): update release notes (#19687)
  • 0418708 fix(nx-cloud): fix nx connect throwing if run twice (#19729)
  • 879436f fix(core): check nxjson cli exists before looking for keys (#19730)
  • b9e671c fix(react): Error when invalid path is provided to federate-module generator (#19720)
  • 024abd2 fix(core): only show cloud messaging when migrating if not using cloud (#19709)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6124857
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants