Skip to content
This repository has been archived by the owner on Feb 4, 2023. It is now read-only.

[Snyk] Security upgrade @strapi/strapi from 4.0.2 to 4.3.5 #7

Closed
wants to merge 1 commit into from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SANITIZEHTML-2957526
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @strapi/strapi The new version differs by 250 commits.
  • a52b053 v4.3.5
  • c0cc71d Merge pull request #14191 from strapi/chore/eslint-ecma2020
  • 6ceb77e Merge pull request #13597 from Jose4gg/master
  • 554671c Move to ecma2020
  • 39b8ece Check if the current time matches the selected interval
  • f30fd3e Fix lint errors
  • 8e5364b Remove unnecessary getStep for datetime/time condition
  • 612112e Add step input for datetime/time fields
  • faac5b3 Merge pull request #14116 from alvesvaren/master
  • c4e6d21 Merge pull request #13994 from yangfei4913438/yangfei/lang-code
  • e309130 Merge pull request #14115 from Hertak/master
  • 43d3724 Merge pull request #14100 from rogix/feat/update-pr-br-translation
  • 4356456 Merge pull request #14182 from strapi/fix/cm-edit-settings-view-tests
  • 78af3eb Merge pull request #13872 from strapi/feature/amplitude-arch
  • cd16049 Merge pull request #14177 from strapi/fix/locale-select-test
  • 43a81dd CM: Fix test errors for EditSettingsView
  • 8231bb9 Merge pull request #14061 from strapi/fix/service-typings
  • 48188bd Merge branch 'main' into fix/service-typings
  • 4eb360c Merge pull request #14172 from strapi/dependabot/npm_and_yarn/react-intl-5.25.1
  • c39dfda chore: Fix and simplify LocaleSelect tests
  • 95575e4 Merge pull request #14179 from strapi/fix/eslint-main
  • 4fd4c7f Merge branch 'main' into fix/service-typings
  • 7b6ca0a Merge branch 'main' into fix/service-typings
  • 326e2ed fix generic service typings

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

馃 Learn about vulnerability in an interactive lesson of Snyk Learn.

@DzmitrySha DzmitrySha closed this Jan 26, 2023
@DzmitrySha DzmitrySha deleted the snyk-fix-7669a042f32c44ecb5c9e0be6eb92018 branch January 26, 2023 15:55
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
2 participants