Skip to content
This repository has been archived by the owner on Mar 28, 2023. It is now read-only.

[Snyk] Security upgrade i18next from 19.8.4 to 19.8.5 #270

Merged
merged 2 commits into from
Mar 22, 2021

Conversation

laukvik
Copy link
Contributor

@laukvik laukvik commented Feb 18, 2021

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Prototype Pollution
SNYK-JS-I18NEXT-1065979
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: i18next The new version differs by 8 commits.
  • aeab3ca 19.8.5
  • f58c423 new version
  • 932f5f6 fix potential prototype pollution when backend plugin resolves a malicious language value
  • 2dc8267 Merge pull request #1533 from pravi/update-rollup-plugin-babel
  • dae2b32 chore: update build dependency (use @ rollup/plugin-babel)
  • 4f9ef14 Merge pull request #1532 from pravi/update-node-resolve-plugin
  • a90fb69 chore: update rollup and plugins
  • ad88092 use fallbackLng as default lng

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

@laukvik laukvik requested a review from a team as a code owner February 18, 2021 04:35
@sonarcloud
Copy link

sonarcloud bot commented Feb 18, 2021

Kudos, SonarCloud Quality Gate passed!

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@MrFjellstad MrFjellstad merged commit 878c302 into main Mar 22, 2021
@MrFjellstad MrFjellstad deleted the snyk-fix-e14cadb3c79ff992f2c1363b8d703991 branch March 22, 2021 09:28
@sonarcloud
Copy link

sonarcloud bot commented Mar 22, 2021

Kudos, SonarCloud Quality Gate passed!

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants