Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade gridsome from 0.6.8 to 0.7.15 #299

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

ajesse11x
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • gridsome/package.json
    • gridsome/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 718/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5
Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: gridsome The new version differs by 247 commits.
  • 1a8ce2e chore(release): publish
  • ea53d07 refactor: use tapPromise instead of tapAsync (#1176)
  • ac919fb chore(cli): improve warning if dir is not empty (#1187)
  • 9e6e118 fix(g-image): rotate based on exif orientation (#1178)
  • 3e5262c chore(graphql): error message for missing collection (#1180)
  • 3dc6b0f fix(config): skip undefined plugins
  • 7a456f8 chore(sitemap): add docs for options
  • 5a311df feat(sitemap): option to include paths
  • 1fcecc0 fix(vue-remark): use named entities when encoding (#1179)
  • 5a28064 fix(graphql): allow GET request with query param (#1127)
  • f9ec161 feat(remark): timeToRead with CJK support (#1160)
  • e0b6656 feat(airtable): option for linked tables (#1054)
  • 5b71d04 fix(graphql): use correct type for store.addReference()
  • 4777d0c fix(graphql): add exists filter query operator
  • f753a47 fix(graphql): exclude undefined variables in page-query
  • dc1a3fe fix(app): add extra debugging output on hash mismatch failure (#1150)
  • 224c883 chore(deps): update sharp to ^0.25.2 (#1140)
  • e8a1b59 fix(cli): show help for unknown commands (#1130)
  • 524e0e2 chore: update JAMstack -> Jamstack (#1148)
  • 5e1d49a fix(app): reduce generated code in routes.js (#724)
  • 8c3a71e refactor(google-analytics): send options to client
  • 719e90b refactor(vue-remark): don’t send options to client
  • 5a482c5 test: set unit or e2e in environment variable
  • 8fc1c5a feat(remark): generate excerpt automatically (#1085)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Resource Consumption ('Resource Exhaustion')

…nerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-6476909
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants