Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

[Snyk] Upgrade: axios, iso-639-1, react-router-dom, styled-components, swiper, validator #48

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade: axios, iso-639-1, react-router-dom, styled-components, swiper, validator #48

wants to merge 1 commit into from

Conversation

MohammadGhajari
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

axios
from 1.7.2 to 1.7.7 | 5 versions ahead of your current version | 22 days ago
on 2024-08-31
iso-639-1
from 3.1.2 to 3.1.3 | 1 version ahead of your current version | a month ago
on 2024-08-27
react-router-dom
from 6.22.3 to 6.26.1 | 19 versions ahead of your current version | a month ago
on 2024-08-15
styled-components
from 6.1.8 to 6.1.13 | 8 versions ahead of your current version | 24 days ago
on 2024-08-30
swiper
from 11.1.3 to 11.1.12 | 9 versions ahead of your current version | 22 days ago
on 2024-09-01
validator
from 13.11.0 to 13.12.0 | 1 version ahead of your current version | 4 months ago
on 2024-05-09

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Server-side Request Forgery (SSRF)
SNYK-JS-AXIOS-7361793		 761 Proof of Concept
Release notes
Package name: axios from axios GitHub release notes
Package name: iso-639-1 from iso-639-1 GitHub release notes
Package name: react-router-dom
  • 6.26.1 - 2024-08-15

    react-router-native@6.26.1

  • 6.26.1-pre.0 - 2024-08-14

    react-router-native@6.26.1-pre.0

  • 6.26.0 - 2024-08-01
  • 6.26.0-pre.1 - 2024-07-31
  • 6.26.0-pre.0 - 2024-07-30
  • 6.25.1 - 2024-07-17
  • 6.25.1-pre.0 - 2024-07-17
  • 6.25.0 - 2024-07-16
  • 6.25.0-pre.0 - 2024-07-12
  • 6.24.1 - 2024-07-03
  • 6.24.1-pre.0 - 2024-07-01
  • 6.24.0 - 2024-06-24
  • 6.24.0-pre.0 - 2024-06-14
  • 6.23.1 - 2024-05-10
  • 6.23.1-pre.1 - 2024-05-09
  • 6.23.1-pre.0 - 2024-04-30
  • 6.23.0 - 2024-04-23
  • 6.23.0-pre.1 - 2024-03-29
  • 6.23.0-pre.0 - 2024-03-27
  • 6.22.3 - 2024-03-07
from react-router-dom GitHub release notes
Package name: styled-components from styled-components GitHub release notes
Package name: swiper
  • 11.1.12 - 2024-09-01

    Bug Fixes

    • cards: fix cards effect styles leak (0be4c6a), closes #7712

    Features

  • 11.1.11 - 2024-08-28

    Bug Fixes

    • centeredSlides with centeredSlidesBounds don't work correct when slidesPerView: 'auto' and width of the swiper-container bigger then width of slides (#7696) (c11172a)
    • element: fix element styles to have correct order override (f26036f), closes #7704
    • virtual: fix bypassing initial translate check if Virtual is enabled (df957bb), closes #7699
  • 11.1.10 - 2024-08-21

    Bug Fixes

    • pagination: fixed swiper Infinite loop scroll jumping (#7690)
    • zoom: fix zoomIn after currentScale is set to 1 (#7663) (94173da)
  • 11.1.9 - 2024-07-31

    11.1.9

  • 11.1.8 - 2024-07-26

    Bug Fixes

    • core: fixed typo in utils/elementIsChildOf (#7649) (575e715)
  • 11.1.7 - 2024-07-24

    Bug Fixes

  • 11.1.6 - 2024-07-23

    Bug Fixes

    • controller: fix 2 way control in element (6eec16b), closes #7628

    Features

    • a11y: added new prop for a11y module - scrollOnFocus (#7632) (f4f7da0)
    • element: added support for using slots as swiper wrappers (#7624) (e374e06)
  • 11.1.5 - 2024-07-15

    Bug Fixes

    • element: fix observer to watch for slides (7cffede), closes #7598
    • improved 3d rotate fix in Safari (cb83879), closes #7532
    • update navigation.scss to remove SASS Deprecation Warning (#7612) (a3e0bf8)
    • vue: add breakpointsBase type (4adb85b), closes #7607
  • 11.1.4 - 2024-05-30

    Bug Fixes

    • a11y: fix slide on focus when loop mode is enabled (fc8ed1a), closes #7540
    • core: check for swiper.el in destroy queue (39a3e53), closes #7530
    • navigation: prevent hide on click when clicking on navigation buttons (c0f7bb6), closes #7559
    • vue: avoid rendering same slide vnode twice for small amount of slides in loop + virtual mode (#7556) (5737f03)
    • zoom: fix issue when slide change possible during zoom out (f67308c)
  • 11.1.3 - 2024-05-13

    Bug Fixes

from swiper GitHub release notes
Package name: validator

@snyk-bot
fix: upgrade multiple dependencies with Snyk
090e0f5 
Snyk has created this PR to upgrade:
  - axios from 1.7.2 to 1.7.7.
    See this package in npm: https://www.npmjs.com/package/axios
  - iso-639-1 from 3.1.2 to 3.1.3.
    See this package in npm: https://www.npmjs.com/package/iso-639-1
  - react-router-dom from 6.22.3 to 6.26.1.
    See this package in npm: https://www.npmjs.com/package/react-router-dom
  - styled-components from 6.1.8 to 6.1.13.
    See this package in npm: https://www.npmjs.com/package/styled-components
  - swiper from 11.1.3 to 11.1.12.
    See this package in npm: https://www.npmjs.com/package/swiper
  - validator from 13.11.0 to 13.12.0.
    See this package in npm: https://www.npmjs.com/package/validator

See this project in Snyk:
https://app.snyk.io/org/mohammadghajari/project/5c7c4675-f0a3-4130-bec3-c486adbb4dbe?utm_source=github&utm_medium=referral&page=upgrade-pr
@MohammadGhajari MohammadGhajari self-assigned this Sep 23, 2024
# for free to join this conversation on GitHub. Already have an account? # to comment
Reviewers
No reviews
Assignees

@MohammadGhajari MohammadGhajari

Labels
None yet
Projects
None yet
Milestone
No milestone
2 participants
@MohammadGhajari @snyk-bot