Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade @nrwl/next from 13.10.6 to 14.7.6 #22

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

talhabalaj
Copy link
Contributor

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @nrwl/next The new version differs by 250 commits.
  • af92e4c chore(misc): publish 14.7.6
  • 8e8b175 fix(core): temp workaround to deal with daemon start during workspace creation
  • d9afcac fix(bundling): default outputFileName to "main.js" when called from "@ nrwl/web:webpack" (#12072)
  • 807430d docs(nxdev): executor examples (#12049)
  • 6e6925f chore(repo): update to nx 14.7.6-beta.6
  • 08e7588 fix(core): split chunk correctly when they contain multiple messages
  • fd670d2 docs(misc): update package descriptions to be more consistent (#12039)
  • 5cab39b docs(nxdev): deprecated section (#12054)
  • a411e85 Feature/move expo (#11712)
  • d90bdae docs(testing): clean up cypress usage in docs (#12047)
  • aad6d43 docs(core): update outdated info in 'contributing.md' (#12038)
  • e2bfaa6 fix(angular): add $schema property to generated project configs (#12031)
  • 1c0bebf docs(nxdev): automatic related docs (#11994)
  • dd6adde feat(bundling): move rollup to its own plugin (#12009)
  • fb25fda chore(graph): add storybook to graph-client (#11870)
  • 40fa765 docs(nxdev): add auto-generated category/index page with custom content if needed (#12017)
  • 730d323 feat(angular): add types to the generated tailwind configuration (#12018)
  • 94f2fe0 chore(repo): switch back to using staging.nx.app
  • 306d8a4 feat(react-native): upgrade react native to 0.70.0 (#11971)
  • dba76f5 chore(react-native): add test for build library react native (#12007)
  • 73fd49a fix(testing): use webpack defined in executor options for react ct (#12005)
  • d535cf3 fix(testing): use cypress generated tsconfig for angular ct (#12014)
  • 7ae08c3 docs(nxdev): added redirect rule for remove storybook page (#12010)
  • e79e483 chore(repo): update version of nx

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992
@talhabalaj talhabalaj self-assigned this Nov 28, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants