Skip to content
This repository has been archived by the owner on Sep 17, 2021. It is now read-only.

[Snyk] Upgrade react-plotly.js from 2.3.0 to 2.4.0 #20

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade react-plotly.js from 2.3.0 to 2.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 5 months ago, on 2019-10-17.

The recommended version fixes:

Severity Issue Exploit Maturity
Cross-site Scripting (XSS)
SNYK-JS-SERIALIZEJAVASCRIPT-536840
No Known Exploit
Prototype Pollution
SNYK-JS-LODASH-450202
Proof of Concept
Release notes
Package name: react-plotly.js from react-plotly.js GitHub release notes
Commit messages
Package name: react-plotly.js
  • 300c9a1 Merge pull request #160 from plotly/2.4.0
  • cd3701e 2.4.0 release
  • 441bbfd Merge pull request #151 from gonzofish/master
  • bd15ca9 Added correct name of remove handler method
  • 8dd14f3 Allow events to be replaced
  • 54bf0b2 Create FUNDING.yml

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant