[Snyk] Fix for 1 vulnerabilities #34

Omrisnyk · 2024-01-05T21:10:47Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	167/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: No, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.78, Score Version: V5	Prototype Pollution SNYK-JS-AXIOS-6144788	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: axios

1.6.4 - 2024-01-03
Release notes:

Bug Fixes
- security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
- security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)
Contributors to this release
- Jay
- Dmitriy Mozgovoy
- Guy Nesher
1.6.3 - 2023-12-26
Release notes:

Bug Fixes
- Regular Expression Denial of Service (ReDoS) (#6132) (5e7ad38)
Contributors to this release
- Jay
- Willian Agostini
- Dmitriy Mozgovoy
1.6.2 - 2023-11-14
Release notes:

Features
- withXSRFToken: added withXSRFToken option as a workaround to achieve the old withCredentials behavior; (#6046) (cff9967)
PRs
- feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( #6046 )
```
📢 This PR added &#x27;withXSRFToken&#x27; option as a replacement for old withCredentials behaviour. 
You should now use withXSRFToken along with withCredential to get the old behavior.
This functionality is considered as a fix.
```
Contributors to this release
- Dmitriy Mozgovoy
- Ng Choon Khon (CK)
- Muhammad Noman
1.6.1 - 2023-11-08
Release notes:

Bug Fixes
- formdata: fixed content-type header normalization for non-standard browser environments; (#6056) (dd465ab)
- platform: fixed emulated browser detection in node.js environment; (#6055) (3dc8369)
Contributors to this release
- Dmitriy Mozgovoy
- Fabian Meyer
1.6.0 - 2023-10-26
Release notes:

Bug Fixes
- CSRF: fixed CSRF vulnerability CVE-2023-45857 (#6028) (96ee232)
- dns: fixed lookup function decorator to work properly in node v20; (#6011) (5aaff53)
- types: fix AxiosHeaders types; (#5931) (a1c8ad0)
PRs
- CVE 2023 45857 ( #6028 )
```
⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
```
Contributors to this release
- Dmitriy Mozgovoy
- Valentin Panov
- Rinku Chaudhari
1.5.1 - 2023-09-26
Release notes:

Bug Fixes
- adapters: improved adapters loading logic to have clear error messages; (#5919) (e410779)
- formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#5917) (bc9af51)
- headers: allow content-encoding header to handle case-insensitive values (#5890) (#5892) (4c89f25)
- types: removed duplicated code (9e62056)
Contributors to this release
- Dmitriy Mozgovoy
- David Dallas
- Sean Sattler
- Mustafa Ateş Uzun
- Przemyslaw Motacki
- Michael Di Prisco
1.5.0 - 2023-08-26
Release notes:

Bug Fixes
- adapter: make adapter loading error more clear by using platform-specific adapters explicitly (#5837) (9a414bb)
- dns: fixed cacheable-lookup integration; (#5836) (b3e327d)
- headers: added support for setting header names that overlap with class methods; (#5831) (d8b4ca0)
- headers: fixed common Content-Type header merging; (#5832) (8fda276)
Features
- export getAdapter function (#5324) (ca73eb8)
- export: export adapters without unsafe prefix (#5839) (1601f4a)
Contributors to this release
- Dmitriy Mozgovoy
- 夜葬
- Jonathan Budiman
- Michael Di Prisco
1.4.0 - 2023-04-27
Release notes:

Bug Fixes
- formdata: add multipart/form-data content type for FormData payload on custom client environments; (#5678) (bbb61e7)
- package: export package internals with unsafe path prefix; (#5677) (df38c94)
Features
- dns: added support for a custom lookup function; (#5339) (2701911)
- types: export AxiosHeaderValue type. (#5525) (726f1c8)
Performance Improvements
- merge-config: optimize mergeConfig performance by avoiding duplicate key visits; (#5679) (e6f7053)
Contributors to this release
- Dmitriy Mozgovoy
- Arthur Fiorette
- PIYUSH NEGI
1.3.6 - 2023-04-19
Release notes:

Bug Fixes
- types: added transport to RawAxiosRequestConfig (#5445) (6f360a2)
- utils: make isFormData detection logic stricter to avoid unnecessary calling of the toString method on the target; (#5661) (aa372f7)
Contributors to this release
- Dmitriy Mozgovoy
- Michael Di Prisco
1.3.5 - 2023-04-05
Release notes:

Bug Fixes
- headers: fixed isValidHeaderName to support full list of allowed characters; (#5584) (e7decef)
- params: re-added the ability to set the function as paramsSerializer config; (#5633) (a56c866)
Contributors to this release
- Dmitriy Mozgovoy
1.3.4 - 2023-02-22
1.3.3 - 2023-02-13
1.3.2 - 2023-02-03
1.3.1 - 2023-02-01
1.3.0 - 2023-01-31
1.2.6 - 2023-01-28
1.2.5 - 2023-01-26
1.2.4 - 2023-01-24
1.2.3 - 2023-01-17
1.2.2 - 2022-12-29
1.2.1 - 2022-12-05
1.2.0 - 2022-11-22
1.2.0-alpha.1 - 2022-11-10
1.1.3 - 2022-10-15
1.1.2 - 2022-10-07
1.1.1 - 2022-10-07
1.1.0 - 2022-10-06
1.0.0 - 2022-10-04
1.0.0-alpha.1 - 2022-05-31
0.27.2 - 2022-04-27
0.27.1 - 2022-04-26
0.27.0 - 2022-04-25
0.26.1 - 2022-03-09
0.26.0 - 2022-02-13
0.25.0 - 2022-01-18
0.24.0 - 2021-10-25
0.23.0 - 2021-10-12
0.22.0 - 2021-10-01
0.21.4 - 2021-09-06
0.21.3 - 2021-09-04
0.21.2 - 2021-09-04
0.21.1 - 2020-12-22
0.21.0 - 2020-10-23

from axios GitHub release notes

Package name: gatsby

4.0.0 - 2021-10-21
4.0.0-zz-next.9 - 2021-10-19
4.0.0-zz-next.8 - 2021-10-13
4.0.0-zz-next.7 - 2021-10-13
4.0.0-zz-next.6 - 2021-10-13
4.0.0-zz-next.5 - 2021-10-12
4.0.0-zz-next.4 - 2021-10-12
4.0.0-zz-next.3 - 2021-10-11
4.0.0-zz-next.2 - 2021-10-05
4.0.0-zz-next.1 - 2021-09-15
4.0.0-zz-next.0 - 2021-09-15
4.0.0-preview-resiliancy.1 - 2021-09-14
4.0.0-next.2 - 2021-09-15
4.0.0-next.1 - 2021-09-14
4.0.0-next.0 - 2021-09-14
4.0.0-drupal-next.5 - 2021-09-24
4.0.0-drupal-next.3 - 2021-09-24
4.0.0-alpha-page-gen.34 - 2021-09-29
4.0.0-alpha-page-gen.33 - 2021-09-29
4.0.0-alpha-page-gen.32 - 2021-09-28
4.0.0-alpha-page-gen.31 - 2021-09-23
4.0.0-alpha-page-gen.30 - 2021-09-23
4.0.0-alpha-page-gen.27 - 2021-09-23
4.0.0-alpha-page-gen.26 - 2021-09-22
4.0.0-alpha-page-gen.25 - 2021-09-22
4.0.0-alpha-9689ff.27 - 2021-08-18
4.0.0-alpha-9689ff.13 - 2021-09-13
4.0.0-alpha-9689ff.12 - 2021-09-10
4.0.0-alpha-9689ff.11 - 2021-09-09
4.0.0-alpha-9689ff.10 - 2021-09-10
4.0.0-alpha-9689ff.9 - 2021-09-09
4.0.0-alpha-9689ff.8 - 2021-09-08
4.0.0-alpha-9689ff.5 - 2021-08-30
4.0.0-alpha-9689ff.4 - 2021-09-09
3.15.0 - 2022-12-07
3.14.6 - 2021-11-18
3.14.5 - 2021-10-28
3.14.4 - 2021-10-22
3.14.3 - 2021-10-15
3.14.2 - 2021-10-05
3.14.1 - 2021-09-30
3.14.0 - 2021-09-17
3.14.0-preview-resiliancy.11 - 2021-09-14
3.14.0-next.7 - 2021-09-11
3.14.0-next.6 - 2021-09-10
3.14.0-next.5 - 2021-09-09
3.14.0-next.4 - 2021-09-08
3.14.0-next.2 - 2021-09-07
3.14.0-next.1 - 2021-09-02
3.14.0-next.0 - 2021-08-27
3.14.0-drupal-next.81 - 2021-11-08
3.14.0-drupal-next.80 - 2021-11-08
3.14.0-drupal-next.79 - 2021-11-08
3.14.0-drupal-next.78 - 2021-11-05
3.14.0-drupal-next.75 - 2021-11-05
3.14.0-drupal-next.74 - 2021-11-04
3.14.0-drupal-next.73 - 2021-11-04
3.14.0-drupal-next.70 - 2021-11-03
3.14.0-drupal-next.67 - 2021-11-02
3.14.0-drupal-next.66 - 2021-11-02
3.14.0-drupal-next.64 - 2021-10-27
3.14.0-drupal-next.63 - 2021-10-27
3.14.0-drupal-next.62 - 2021-10-27
3.14.0-drupal-next.61 - 2021-10-27
3.14.0-drupal-next.60 - 2021-10-27
3.14.0-drupal-next.59 - 2021-10-27
3.14.0-drupal-next.57 - 2021-10-26
3.14.0-drupal-next.53 - 2021-10-26
3.14.0-drupal-next.49 - 2021-10-18
3.14.0-drupal-next.48 - 2021-10-14
3.14.0-drupal-next.47 - 2021-10-13
3.14.0-drupal-next.46 - 2021-10-13
3.14.0-drupal-next.44 - 2021-10-11
3.14.0-drupal-next.43 - 2021-10-11
3.14.0-drupal-next.42 - 2021-10-10
3.14.0-drupal-next.41 - 2021-10-08
3.14.0-drupal-next.39 - 2021-10-08
3.14.0-drupal-next.38 - 2021-10-08
3.14.0-drupal-next.37 - 2021-10-08
3.14.0-drupal-next.35 - 2021-10-01
3.14.0-drupal-next.34 - 2021-10-01
3.14.0-drupal-next.33 - 2021-09-30
3.14.0-drupal-next.32 - 2021-09-29
3.14.0-drupal-next.30 - 2021-09-28
3.14.0-drupal-next.29 - 2021-09-28
3.14.0-drupal-next.27 - 2021-09-28
3.14.0-drupal-next.17 - 2021-09-27
3.14.0-drupal-next.15 - 2021-09-15
3.14.0-alpha-remote-fetch.79 - 2021-09-03
3.14.0-alpha-remote-fetch.78 - 2021-09-02
3.14.0-alpha-qe-sm.5 - 2021-09-13
3.14.0-alpha-qe-sm.0 - 2021-09-08
3.13.1 - 2021-09-16
3.13.0 - 2021-08-31
3.13.0-next.4 - 2021-08-27
3.13.0-next.3 - 2021-08-25
3.13.0-next.2 - 2021-08-20
3.13.0-next.1 - 2021-08-19
3.13.0-next.0 - 2021-08-12
3.13.0-debug-cache.7 - 2021-08-23
3.13.0-alpha-node-manifests.26 - 2021-08-18
3.13.0-alpha-node-manifests.23 - 2021-08-18
3.13.0-alpha-node-manifests.22 - 2021-08-18
3.13.0-alpha-node-manifests.20 - 2021-08-17
3.13.0-alpha-node-manifests.19 - 2021-08-17
3.13.0-alpha-node-manifests.18 - 2021-08-17
3.12.1 - 2021-08-26
3.12.0 - 2021-08-18
3.12.0-next.3 - 2021-08-09
3.12.0-next.2 - 2021-08-05
3.12.0-next.1 - 2021-08-05
3.12.0-next.0 - 2021-07-29
3.12.0-coreutils.29 - 2021-08-23
3.11.1 - 2021-08-09
3.11.0 - 2021-08-04
3.11.0-next.6 - 2021-07-27
3.11.0-next.5 - 2021-07-26
3.11.0-next.4 - 2021-07-23
3.11.0-next.3 - 2021-07-23
3.11.0-next.2 - 2021-07-22
3.11.0-next.1 - 2021-07-19
3.11.0-next.0 - 2021-07-15
3.11.0-alpha-qe-sm.92 - 2021-09-02
3.11.0-alpha-qe-sm.70 - 2021-08-26
3.11.0-alpha-qe-sm.69 - 2021-08-25
3.11.0-alpha-qe-sm.67 - 2021-08-24
3.11.0-alpha-qe-sm.48 - 2021-08-09
3.11.0-alpha-qe-sm.26 - 2021-07-28
3.11.0-alpha-qe-sm.25 - 2021-07-28
3.11.0-alpha-pr32545.3 - 2021-07-30
3.11.0-alpha-pqr-waitjobs.4 - 2021-07-27
3.11.0-alpha-node-manifests.3 - 2021-07-29
3.11.0-alpha-node-manifests.0 - 2021-07-29
3.10.2 - 2021-07-26
3.10.1 - 2021-07-21
3.10.0 - 2021-07-20
3.10.0-next.7 - 2021-07-14
3.10.0-next.6 - 2021-07-14
3.10.0-next.5 - 2021-07-13
3.10.0-next.4 - 2021-07-09
3.10.0-next.3 - 2021-07-08
3.10.0-next.2 - 2021-07-05
3.10.0-next.1 - 2021-07-02
3.10.0-next.0 - 2021-07-01
3.10.0-alpha-ssrr.36 - 2021-07-06
3.10.0-alpha-ssr.38 - 2021-07-06
3.10.0-alpha-ssr.37 - 2021-07-06
3.10.0-alpha-ssr.36 - 2021-07-06
3.10.0-alpha-ssr.35 - 2021-07-06
3.10.0-alpha-remote-file.30 - 2021-07-22
3.10.0-alpha-remote-fetch.41 - 2021-08-12
3.10.0-alpha-node-manifest-windows-escape.33 - 2021-11-04
3.10.0-alpha-node-manifest-windows-escape.30 - 2021-11-04
3.10.0-alpha-9689ff.12 - 2021-07-13
3.9.1 - 2021-07-09
3.9.0 - 2021-07-06
3.9.0-next.1 - 2021-06-28
3.9.0-next.0 - 2021-06-18
3.9.0-alpha-ssr.15 - 2021-06-30
3.9.0-alpha-pqr-debug.31 - 2021-07-07
3.9.0-alpha-pqr-debug.30 - 2021-07-07
3.9.0-alpha-pqr-bootstrap.29 - 2021-07-06
3.9.0-alpha-pqr-bootstrap.25 - 2021-07-05
3.8.1 - 2021-06-29
3.8.0 - 2021-06-22
3.8.0-next.2 - 2021-06-17
3.8.0-next.1 - 2021-06-10
3.8.0-next.0 - 2021-06-03
3.8.0-alpha-log-state-slice-size.37 - 2021-06-08
3.8.0-alpha-log-state-slice-size.36 - 2021-06-08
3.7.2 - 2021-06-15
3.7.1 - 2021-06-10
3.7.0 - 2021-06-08
3.7.0-next.2 - 2021-06-02
3.7.0-next.1 - 2021-05-31
3.7.0-next.0 - 2021-05-21
3.6.2 - 2021-06-02
3.6.1 - 2021-05-27
3.6.0 - 2021-05-25
3.6.0-next.6 - 2021-05-20
3.6.0-next.5 - 2021-05-19
3.6.0-next.4 - 2021-05-19
3.6.0-next.3 - 2021-05-18
3.6.0-next.2 - 2021-05-18
3.6.0-next.1 - 2021-05-12
3.6.0-next.0 - 2021-05-06
3.6.0-alpha-ssr.265 - 2021-07-02
3.6.0-alpha-ssr.264 - 2021-07-02
3.6.0-alpha-ssr.262 - 2021-07-02
3.6.0-alpha-ssr.261 - 2021-07-02
3.6.0-alpha-ssr.260 - 2021-07-02
3.6.0-alpha-ssr.259 - 2021-07-02
3.6.0-alpha-ssr.258 - 2021-07-02
3.6.0-alpha-ssr.257 - 2021-07-02
3.6.0-alpha-ssr.256 - 2021-07-02
3.6.0-alpha-ssr.255 - 2021-07-02
3.6.0-alpha-ssr.254 - 2021-07-02
3.6.0-alpha-ssr.253 - 2021-07-01
3.6.0-alpha-ssr.251 - 2021-07-01
3.6.0-alpha-ssr.248 - 2021-07-01
3.6.0-alpha-ssr.247 - 2021-07-01
3.6.0-alpha-ssr.246 - 2021-07-01
3.6.0-alpha-parallel-query.75 - 2021-06-02
3.6.0-alpha-parallel-query.74 - 2021-06-01
3.6.0-alpha-parallel-query.68 - 2021-06-01
3.6.0-alpha-parallel-query.66 - 2021-06-01
3.6.0-alpha-lmdb.32 - 2021-05-18
3.6.0-alpha-lmdb.31 - 2021-05-17
3.6.0-alpha-lmdb.26 - 2021-05-12
3.6.0-alpha-concurrent-features.0 - 2021-05-12
3.6.0-abhi-pqr.380 - 2021-07-27
3.6.0-abhi-pqr.379 - 2021-07-26
3.5.1 - 2021-05-19
3.5.0 - 2021-05-11
3.5.0-telemetry-test.252 - 2021-06-22
3.5.0-next.4 - 2021-05-05
3.5.0-next.3 - 2021-05-01
3.5.0-next.2 - 2021-04-29
3.5.0-next.1 - 2021-04-28
3.5.0-next.0 - 2021-04-23
3.5.0-alpha-node-manifest.73 - 2021-05-26
3.5.0-alpha-node-manifest.69 - 2021-05-26
3.4.2 - 2021-05-07
3.4.1 - 2021-05-04
3.4.0 - 2021-04-27
3.4.0-webpack-split-fix.8 - 2021-04-10
3.4.0-next.6 - 2021-04-22
3.4.0-next.5 - 2021-04-20
3.4.0-next.3 - 2021-04-19
3.4.0-next.2 - 2021-04-16
3.4.0-next.1 - 2021-04-16
3.4.0-next.0 - 2021-04-09
3.4.0-functions-next.16 - 2021-04-20
3.4.0-functions-next.14 - 2021-04-20
3.4.0-alpha-webpack-fs-cache.33 - 2021-04-15
3.4.0-alpha-parallel.53 - 2021-04-28
3.4.0-alpha-parallel.50 - 2021-04-28
3.4.0-alpha-parallel.42 - 2021-04-16
3.4.0-alpha-parallel.41 - 2021-04-15
3.4.0-alpha-parallel.39 - 2021-04-15
3.4.0-alpha-parallel.37 - 2021-04-15
3.4.0-alpha-parallel.36 - 2021-04-15
3.3.1 - 2021-04-19
3.3.0 - 2021-04-13
3.3.0-telemetry-test.34 - 2021-05-03
3.3.0-telemetry-test.33 - 2021-05-03
3.3.0-next.3 - 2021-04-09
3.3.0-next.2 - 2021-04-07
3.3.0-next.1 - 2021-03-30
3.3.0-next.0 - 2021-03-25
3.3.0-alpha-sharp-upgrade.15 - 2021-03-31
3.3.0-alpha-defer-task-queues.14 - 2021-04-09
3.2.1 - 2021-04-01
3.2.0 - 2021-03-30
3.2.0-next.1 - 2021-03-19
3.2.0-next.0 - 2021-03-11
3.2.0-alpha-wordpress.29 - 2021-03-25
3.2.0-alpha-skip-page-data-write.17 - 2021-03-17
3.2.0-alpha-parallel.29 - 2021-03-27
3.2.0-alpha-parallel.28 - 2021-03-24
3.2.0-alpha-inc-build-diag.1 - 2021-03-13
3.2.0-alpha-inc-build-diag.0 - 2021-03-13
3.2.0-alpha-agents-are-cool.0 - 2021-03-12
3.1.3 - 2021-03-30
3.1.2 - 2021-03-23
3.1.1 - 2021-03-18
3.1.0 - 2021-03-16
3.1.0-next.4 - 2021-03-10
3.1.0-next.3 - 2021-02-28
3.1.0-next.2 - 2021-02-26
3.1.0-next.1 - 2021-02-26
3.1.0-next.0 - 2021-02-26
3.1.0-functions-next.73 - 2021-04-16
3.1.0-functions-next.72 - 2021-04-16
3.1.0-functions-next.60 - 2021-04-13
3.1.0-functions-next.59 - 2021-04-13
3.1.0-functions-next.57 - 2021-04-13
3.1.0-functions-next.55 - 2021-04-13
3.1.0-functions-next.54 - 2021-04-13
3.1.0-functions-next.52 - 2021-04-13
3.1.0-functions-next.51 - 2021-04-13
3.1.0-alpha-hmr-fix.16 - 2021-03-12
3.1.0-alpha-hmr-fix.13 - 2021-03-12
3.1.0-alpha-hmr-fix.11 - 2021-03-11
3.1.0-alpha-hmr-fix.10 - 2021-03-11
3.1.0-alpha-hmr-fix.9 - 2021-03-11
3.0.4 - 2021-03-09
3.0.3 - 2021-03-05
3.0.2 - 2021-03-04
3.0.1 - 2021-03-03
3.0.0 - 2021-03-02
3.0.0-v3rc.5 - 2021-03-02
3.0.0-v3rc.4 - 2021-03-01
3.0.0-v3rc.3 - 2021-03-01
3.0.0-v3rc.2 - 2021-02-28
3.0.0-v3rc.1 - 2021-02-26
3.0.0-v3rc.0 - 2021-02-26
3.0.0-reach-router.18 - 2021-02-26
3.0.0-reach-router.16 - 2021-02-26
3.0.0-reach-router.14 - 2021-02-26
3.0.0-next.9 - 2021-02-25
3.0.0-next.8 - 2021-02-22
3.0.0-next.7 - 2021-02-19
3.0.0-next.6 - 2021-02-18
3.0.0-next.5 - 2021-02-17
3.0.0-next.4 - 2021-02-15
3.0.0-next.3 - 2021-02-12
3.0.0-next.2 - 2021-02-11
3.0.0-next.1 - 2021-02-08
3.0.0-next.0 - 2021-02-05
3.0.0-cpb3.20 - 2021-02-15
3.0.0-alpha-reach-router.14 - 2021-02-26
2.33.0-next.1 - 2021-02-04
2.33.0-next.0 - 2021-01-28
2.33.0-blazing-fast.27 - 2021-02-08
2.33.0-blazing-fast.26 - 2021-02-08
2.33.0-blazing-fast.25 - 2021-02-08
2.33.0-blazing-fast.24 - 2021-02-08
2.33.0-blazing-fast.23 - 2021-02-08
2.33.0-blazing-fast.22 - 2021-02-08
2.33.0-blazing-fast.21 - 2021-02-08
2.33.0-blazing-fast.20 - 2021-02-05
2.33.0-blazing-fast.19 - 2021-02-05
2.33.0-blazing-fast.18 - 2021-02-04
2.33.0-blazing-fast.17 - 2021-02-03
2.33.0-blazing-fast.15 - 2021-02-03
2.33.0-blazing-fast.14 - 2021-02-03
2.33.0-blazing-fast.4 - 2021-02-02
2.32.13 - 2021-05-04
2.32.12 - 2021-04-07
2.32.11 - 2021-03-09
2.32.10 - 2021-03-08
2.32.9 - 2021-03-01
2.32.8 - 2021-02-25
2.32.7 - 2021-02-25
2.32.6 - 2021-02-24
2.32.5 - 2021-02-24
2.32.5-pin-babel-7-12.3 - 2021-02-23
2.32.4 - 2021-02-18
2.32.4-runtime-tick.2 - 2021-02-21
2.32.3 - 2021-02-05
2.32.2 - 2021-02-04
2.32.1 - 2021-02-04
2.32.0 - 2021-02-02
2.32.0-next.1 - 2021-01-26
2.32.0-next.0 - 2021-01-18
2.32.0-cpb3.26 - 2021-01-31
2.32.0-alpha-webpack5.17 - 2021-01-29
2.32.0-alpha-webpack5.16 - 2021-01-29
2.32.0-alpha-webpack5.15 - 2021-01-29
2.32.0-alpha-webpack5.14 - 2021-01-28
2.32.0-alpha-webpack5.13 - 2021-01-27
2.31.1 - 2021-01-21
2.31.0 - 2021-01-19
2.31.0-query-chunk-stats-base.70 - 2021-01-13
2.31.0-query-chunk-stats-base.69 - 2021-01-13
2.31.0-query-chunk-stats.74 - 2021-01-14
2.31.0-query-chunk-stats.73 - 2021-01-13
2.31.0-query-chunk-stats.72 - 2021-01-12
2.31.0-query-chunk-stats.71 - 2021-01-12
2.31.0-next.1 - 2021-01-12
2.31.0-next.0 - 2020-12-29
2.31.0-incbuilds-special.22 - 2021-01-12
2.30.3 - 2021-01-16
2.30.2 - 2021-01-13
2.30.1 - 2021-01-06
2.30.0 - 2021-01-05
2.30.0-next.8 - 2020-12-29
2.30.0-next.7 - 2020-12-18
2.30.0-next.6 - 2020-12-17
2.30.0-next.5 - 2020-12-17
2.30.0-next.4 - 2020-12-17
2.30.0-next.3 - 2020-12-16
2.30.0-next.2 - 2020-12-15
2.30.0-next.1 - 2020-12-11
2.30.0-next.0 - 2020-12-10
2.29.3 - 2020-12-29
2.29.2 - 2020-12-23
2.29.1 - 2020-12-16
2.29.0 - 2020-12-15
2.29.0-next.4 - 2020-12-08
2.29.0-next.3 - 2020-12-04
2.29.0-next.2 - 2020-12-03
2.29.0-next.1 - 2020-12-01
2.29.0-next.0 - 2020-11-26
2.29.0-latest-dev-ssr.31 - 2020-12-08
2.29.0-latest-dev-ssr.30 - 2020-12-08
2.29.0-latest-dev-ssr.29 - 2020-12-08
2.29.0-dev-preload-and-chunk.25 - 2020-12-03
2.29.0-dev-preload.24 - 2020-12-03
2.29.0-dev-preload.23 - 2020-12-03
2.29.0-dev-preload.22 - 2020-12-03
2.29.0-dev-preload.21 - 2020-12-03
2.29.0-create-gatsby.2 - 2020-11-27
2.28.2 - 2020-12-10
2.28.1 - 2020-12-07
2.28.0 - 2020-12-02
2.28.0-next.2 - 2020-11-24
2.28.0-next.1 - 2020-11-22
2.28.0-next.0 - 2020-11-18
2.28.0-functions.13 - 2020-11-25
2.28.0-functions.12 - 2020-11-25
2.27.5 - 2020-11-30
2.27.4 - 2020-11-26
2.27.3 - 2020-11-25
2.27.2 - 2020-11-24
2.27.1 - 2020-11-23
2.27.0 - 2020-11-19
2.27.0-telemetry-test2.327 - 2020-12-30
2.27.0-telemetry-test2.326 - 2020-12-30
2.27.0-telemetry-test.373 - 2021-01-11
2.27.0-telemetry-test.326 - 2020-12-30
2.27.0-telemetry-test.315 - 2020-12-22
2.27.0-telemetry-test.314 - 2020-12-22
2.27.0-next.1 - 2020-11-16
2.27.0-next.0 - 2020-11-10
2.26.1 - 2020-11-13
2.26.0 - 2020-11-12
2.26.0-next.3 - 2020-11-10
2.26.0-next.2 - 2020-11-09
2.26.0-next.1 - 2020-11-05
2.26.0-next.0 - 2020-11-03
2.25.4 - 2020-11-11
2.25.3 - 2020-11-05
2.25.2 - 2020-11-04
2.25.1 - 2020-11-02
2.25.0 - 2020-11-02
2.24.92 - 2020-11-02
2.24.92-create-gatsby.85 - 2020-11-12
2.24.92-create-gatsby.84 - 2020-11-12
2.24.92-create-gatsby.83 - 2020-11-12
2.24.92-create-gatsby.82 - 2020-11-12
2.24.92-create-gatsby.62 - 2020-11-07
2.24.92-create-gatsby.32 - 2020-11-04
2.24.92-create-gatsby.26 - 2020-11-03
2.24.92-create-gatsby.22 - 2020-11-03
2.24.91 - 2020-10-28

from gatsby GitHub release notes

Commit messages

Package name: axios

The new version differs by 250 commits.

8790b8e chore(release): v1.6.4 (#6173)
0ad520d chore(ci): fix notify action; (#6172)
3c0c11c fix(security): fixed formToJSON prototype pollution vulnerability; (#6167)
75af1cd fix(security): fixed security vulnerability in follow-redirects (#6163)
90864b3 docs: update logos
1542719 docs: updated headline sponsors
b15b918 chore(release): v1.6.3 (#6151)
b76cce0 chore(ci): added branches filter for notify action; (#6084)
5e7ad38 fix: Regular Expression Denial of Service (ReDoS) (#6132)
8befb86 docs: update alloy link (#6145)
d18f40d docs: add headline sponsors
b3be365 chore(release): v1.6.2 (#6082)
8739acb chore(ci): removed redundant release action; (#6081)
bfa9c30 chore(docs): fix outdated grunt to npm scripts (#6073)
a2b0fb3 chore(docs): update README.md (#6048)
b12a608 chore(ci): removed paths-ignore filter; (#6080)
0c9d886 chore(ci): reworked ignoring files logic; (#6079)
30873ee chore(ci): add paths-ignore config to testing action; (#6078)
cff9967 feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; (#6046)
7009715 chore(ci): fixed release notification action; (#6064)
7144f10 chore(ci): fixed release notification action; (#6063)
f6d2cf9 chore(ci): fix publish action content permission; (#6061)
a22f4b9 chore(release): v1.6.1 (#6060)
cb8bb2b chore(ci): Publish to NPM with provenance (#5835)

See the full diff

Package name: gatsby

The new version differs by 250 commits.

8d07242 chore(release): Publish
0790895 chore(gatsby): Update README (#33615)
06760d7 chore(gatsby): Change comment format in actions/public (#33592)
7d66a23 feat(gatsby): capture number of ssg,dsg,ssr pages in telemetry (#33337)
98a843c fix(gatsby): use lmdb.removeSync so getNode can't return deleted nodes (#33554)
4d8e40b fix(gatsby-source-wordpress): Add steps for `refetch_ALL` (#33264)
4761dc3 fix(gatsby): restore onPreBuild to being called right after bootstrap finishes (#33591)
1cdbab6 fix(deps): update starters and examples gatsby packages to ^3.14.3 (#33553)
0f421db chore(release): Publish next
7d6a0aa fix(gatsby): fix page-tree in ink-cli (#33579)
3993819 chore(gatsby): Add `assetPrefix` to `IGatsbyConfig` (#33575)
6cc964a fix(gatsby-source-wordpress): restore PQR support (#33590)
9eef270 specifying what actually changed (#33452)
2975c4d feat(gatsby,gatsby-link): add queue to prefetch (#33530)
68fe836 fix(gatsby): temporary workaround for stale jobs cache (#33586)
a800d9d fix(gatsby): Update internal usage of .runQuery (#33571)
677760c chore(docs): Clarify SEO c...

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6144788

fix: package.json & package-lock.json to reduce vulnerabilities

5cbbef1

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6144788

[Snyk] Fix for 1 vulnerabilities #34

Are you sure you want to change the base?

[Snyk] Fix for 1 vulnerabilities #34

Conversation

Omrisnyk commented Jan 5, 2024

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:

Release notes:

Bug Fixes

Contributors to this release

Release notes:

Bug Fixes

Contributors to this release

Release notes:

Features

PRs

Contributors to this release

Release notes:

Bug Fixes

Contributors to this release

Release notes:

Bug Fixes

PRs

Contributors to this release

Release notes:

Bug Fixes

Contributors to this release

Release notes:

Bug Fixes

Features

Contributors to this release

Release notes:

Bug Fixes

Features

Performance Improvements

Contributors to this release

Release notes:

Bug Fixes

Contributors to this release

Release notes:

Bug Fixes

Contributors to this release