Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade @strapi/strapi from 4.2.3 to 4.6.0 #5

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

cokuevn
Copy link
Owner

@cokuevn cokuevn commented Jan 26, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 751/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.6
SQL Injection
SNYK-JS-KNEX-3175610
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @strapi/strapi The new version differs by 250 commits.
  • a9e5543 v4.6.0
  • ded9dfc Merge pull request #15580 from strapi/fix/ignore-audit-log-on-data-transfer
  • cdcd83d Ignore admin::audit-log on import/export
  • e72d2a0 Fix clean script for data-transfer
  • b23bba9 Merge pull request #15147 from strapi/chore/online-license-skeleton
  • 3fd5bbc Merge pull request #15036 from strapi/features/deits
  • e6ae4da Merge pull request #15578 from strapi/chore/remove-fontawesome-deps-audit
  • ef4f25a Chore: Remove fontawesome dependencies
  • a0b344e Fix audit logs test
  • 0546a82 Update transaction to its latest API
  • 950dda7 Update SSO error message
  • f3550ce Add audit logs support & update the features API
  • 0da8157 Add devide ID in the payload of the license check
  • 49727cb Replace comments with JSDoc
  • 0609de2 Populate default features array even during init
  • e1e812d Remove double ee check
  • 6fe16dc Add shiftCronExpression utils
  • 5f86716 Apply Alex's missing feedback
  • c433691 Use ee_store instead of the core_store
  • f4ef160 Rework license fetching and add error handling
  • 2aecf83 Add cron job to dynamically update the license
  • b37a8be Add online license check
  • 5a2b379 Runtime server feature flag
  • 9211620 Get features from the licenseInfo for the default type mapping

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

馃 SQL Injection

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants