echo
echo copied to clipboard
toddmotto
[Snyk] Security upgrade karma from 0.12.37 to 6.3.14
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
663/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.4 |
Cross-site Scripting (XSS) SNYK-JS-KARMA-2395349 |
Yes | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: karma
The new version differs by 250 commits.- c97e562 chore(release): 6.3.14 [skip ci]
- 91d5acd fix: remove string template from client code
- 69cfc76 fix: warn when `singleRun` and `autoWatch` are `false`
- 839578c fix(security): remove XSS vulnerability in `returnUrl` query param
- db53785 chore(release): 6.3.13 [skip ci]
- 5bf2df3 fix(deps): bump log4js to resolve security issue
- 36ad678 chore(release): 6.3.12 [skip ci]
- 41bed33 fix: remove depreciation warning from log4js
- c985155 docs: create security.md
- c96f0c5 chore(release): 6.3.11 [skip ci]
- a5219c5 fix(deps): pin colors package to 1.4.0 due to security vulnerability
- de0df2f test: fix version regex in the CLI test case
- eddb2e8 chore(release): 6.3.10 [skip ci]
- 0d24bd9 fix(logger): create parent folders if they are missing
- b8eafe9 chore(release): 6.3.9 [skip ci]
- cf318e5 test: add test case for restarting test run on file change
- 92ffe60 fix: restartOnFileChange option not restarting the test run
- b153355 style: fix grammar error in browser capture log message
- 8f798d5 chore(release): 6.3.8 [skip ci]
- 4f23b14 fix(reporter): warning if stack trace contains generated code invocation
- 4c6f681 build: remove husky and validation hooks
- a2261bb build: use matching commitlint config
- 920fa33 chore(release): 6.3.7 [skip ci]
- f1aeaec fix(middleware): replace %X_UA_COMPATIBLE% marker anywhere in the file
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
