[Snyk] Fix for 2 vulnerabilities

Open Molin123 opened this issue 3 years ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: css-loader

The new version differs by 146 commits.

634ab49 chore(release): 2.0.0
6ade2d0 refactor: remove unused file (#860)
e7525c9 test: nested url (#859)
7259faa test: css hacks (#858)
5e6034c feat: allow to filter import at-rules (#857)
5e702e7 feat: allow filtering urls (#856)
9642aa5 test: css stuff (#855)
3338656 fix: reduce number of require for url (#854)
533abbe test: issue 636 (#853)
08c551c refactor: better warning on invalid url resolution (#852)
b0aa159 test: issue #589 (#851)
f599c70 fix: broken unucode characters (#850)
1e551f3 test: issue 286 (#849)
419d27b docs: improve readme (#848)
d94a698 refactor: webpack-default (#847)
b97d997 feat: schema options
453248f fix: support module resolution in composes (#845)
8a6ea10 refactor: postcss plugins (#844)
fdcf687 fix: url resolving logic (#843)
889dc7f feat: allow to disable css modules and disable their by default (#842)
ee2d253 test: importLoaders option (#841)
1dad1fb feat: reuse postcss ast from other loaders (i.e `postcss-loader`) (#840)
fe94ebc test: icss reserved keywords (#839)
9eaba66 refactor: migrate on message api for postcss-icss-plugin (#838)

Package name: html-webpack-plugin

The new version differs by 250 commits.

873d75b chore(release): 5.5.0
ddeb774 chore: update examples
1e42625 feat: Support type=module via scriptLoading option
7d3645b Bump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-3807
79be779 [chore] changes actions to run on pull_requests
b7e5859 [chore] fixes CI to avoid race conditions
48131d3 chore(release): 5.4.0
16a841a [chore] rebuild examples
3bb7c17 Update index.js
e38ac97 Update index.js
f08bd02 [chore] updates fixtures
d62a10f [chore] upgrades [email protected] -> 6.0.2
2f5de7a Remove archived plugin
8f8f7c5 chore(release): 5.3.2
053c6e6 chore: update snapshot tests for webpack 5.4.0
9c7fba0 Fix security vulnerabilities
b98fbeb Fix security vulnerabilities
25cdfc7 Added inject-body-webpack-plugin to readme
0e4c1fb Update README to document actual behavior
0a6568d chore(release): 5.3.1
82d0ee8 fix: remove loader-utils from plugin core
6f39192 chore(release): 5.3.0
d654f5b feat: allow to modify the interpolation options in webpack config
41d7a50 feat: drop loader-utils dependency

Package name: optimize-css-assets-webpack-plugin

The new version differs by 2 commits.

Package name: svg-sprite-loader

The new version differs by 136 commits.

3364249 2.0.1
c21fc48 Update examples
6d202f2 Refactoring
03b2353 Use browser sprite by default
e7e56fd Update README.md
c237eec 2.0.0
a2947e8 Add toc to readme
4dbf434 Merge branch '2.0'
36f48fe Update README
39a1922 Update 2.0 overview
b2aa0ab Restore missed section in overview
85ce360 Add 2.0 overview
ca52ed6 Update README
fe5158c Update config
72b152d Fix bluebird warning (https://snyk.io/redirect/github/kisenka/svg-sprite-loader/issues/91#issuecomment-297690801)
e5d2afc Runtime compat
a7ef2e8 Update yarn lock
f21f87b Update yarn lock
d42e03a Update yarn lock
f5066ff Update yarn lock
dedbba6 Update webpack-toolkit
e7c307b Update set-env script
e1b9030 Update dependencies
1e3cc72 Refactoring

Package name: webpack

The new version differs by 250 commits.

Package name: webpack-dev-server

The new version differs by 250 commits.

c9271b9 chore(release): 4.0.0
18bf369 test: fix stability (#3676)
cdcabb2 fix: respect protocol from browser for manual setup (#3675)
1768d6b fix: initial reloading for lazy compilation (#3662)
4f5bab1 docs: improve examples (#3672)
f2d87fb fix: improve https CLI output (#3673)
0277c5e chore: remove redundant console statements (#3671)
16fcdbc docs: add `ipc` example (#3667)
8915fb8 test: add e2e tests for built in routes (#3669)
4d1cbe1 docs: ask `version` information in issue template (#3668)
b6c1881 chore(deps-dev): bump core-js from 3.16.1 to 3.16.2 (#3666)
ffa8cc5 chore(deps-dev): bump supertest from 6.1.5 to 6.1.6 (#3665)
f1fdaa7 chore(release): 4.0.0-rc.1
c4678bc fix: legacy API (#3660)
d8bdd03 test: fix stability (#3661)
22b1414 refactor: remove `killable` (#3657)
75bafbf test: add e2e tests for module federation (#3658)
493ccbd chore(deps): update `ws` (#3652)
ae8c523 test: add e2e test for universal compiler (#3656)
f94b84f chore(deps): update (#3655)
1923132 test: fix cli
2adfd01 test: fix todo (#3653)
6e2cbde fix: proxy logging and allow to pass options without the `target` option (#3651)
c9ccc96 fix: respect infastructureLogging.level for client.logging (#3613)

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

Learn how to fix vulnerabilities with free interactive lessons:

May 19 '22 05:05 Molin123