Skip to content

[Snyk] Upgrade swagger-ui from 4.12.0 to 4.19.1#2

Open
MFIB00 wants to merge 1 commit intomainfrom
snyk-upgrade-7f0698124dbb0654d873410dfac7daa3
Open

[Snyk] Upgrade swagger-ui from 4.12.0 to 4.19.1#2
MFIB00 wants to merge 1 commit intomainfrom
snyk-upgrade-7f0698124dbb0654d873410dfac7daa3

Conversation

@MFIB00
Copy link
Copy Markdown
Owner

@MFIB00 MFIB00 commented Feb 2, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade swagger-ui from 4.12.0 to 4.19.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 26 versions ahead of your current version.
  • The recommended version was released 8 months ago, on 2023-06-12.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Cross-site Request Forgery (CSRF)
SNYK-JS-AXIOS-6032459
462/1000
Why? Proof of Concept exploit, CVSS 7.1
Proof of Concept
Prototype Pollution
SNYK-JS-AXIOS-6144788
462/1000
Why? Proof of Concept exploit, CVSS 7.1
No Known Exploit
Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137
462/1000
Why? Proof of Concept exploit, CVSS 7.1
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857
462/1000
Why? Proof of Concept exploit, CVSS 7.1
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-BRAINTREESANITIZEURL-3330766
462/1000
Why? Proof of Concept exploit, CVSS 7.1
No Known Exploit
Information Exposure
SNYK-JS-UNDICI-5962466
462/1000
Why? Proof of Concept exploit, CVSS 7.1
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
462/1000
Why? Proof of Concept exploit, CVSS 7.1
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: swagger-ui
  • 4.19.1 - 2023-06-12

    4.19.1 (2023-06-12)

    Bug Fixes

    • export standalone preset from the npm package (#8906) (cdd0bdd), closes #8163
    • request-body: fix immutable prop types validation (#8307) (07a08cd)
  • 4.19.0 - 2023-05-24

    4.19.0 (2023-05-24)

    Bug Fixes

    Features

    • auth: persist cookie based apiKey in document.cookie (#8689) (7ac9a8f), closes #8683

    Enhancements

    • docker: update Dockerfile base image to nginx:1.24.0-alpine (#8697) (da48ea1)
  • 4.18.3 - 2023-04-26
  • 4.18.2 - 2023-03-30
  • 4.18.1 - 2023-03-10
  • 4.18.0 - 2023-03-08
  • 4.17.1 - 2023-03-06
  • 4.17.0 - 2023-03-01
  • 4.16.1 - 2023-02-25
  • 4.16.0 - 2023-02-24
  • 4.16.0-alpha.3 - 2023-02-15
  • 4.16.0-alpha.2 - 2023-02-15
  • 4.16.0-alpha.1 - 2023-02-14
  • 4.15.5 - 2022-11-09
  • 4.15.4 - 2022-11-09

    4.15.4 (2022-11-09)

    Reverts

    • patch-package: temporarily remove postinstall hook (#8287) (6cbee7e)
  • 4.15.3 - 2022-11-08
  • 4.15.2 - 2022-10-26
  • 4.15.1 - 2022-10-25
  • 4.15.0 - 2022-10-20
  • 4.14.3 - 2022-10-11
  • 4.14.2 - 2022-09-29
  • 4.14.1 - 2022-09-22
  • 4.14.0 - 2022-08-17
  • 4.13.2 - 2022-08-02
  • 4.13.1 - 2022-08-01
  • 4.13.0 - 2022-07-19
  • 4.12.0 - 2022-06-03
from swagger-ui GitHub release notes
Commit messages
Package name: swagger-ui

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants