Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Fix for 1 vulnerabilities #205

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Omrisnyk
Copy link
Owner

@Omrisnyk Omrisnyk commented Nov 8, 2024

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • cyclic-dep/package.json
  • cyclic-dep/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
  170  
Release notes
Package name: @thebespokepixel/string from @thebespokepixel/string GitHub release notes
Package name: term-ng from term-ng GitHub release notes
Package name: truwrap from truwrap GitHub release notes
Package name: update-notifier
  • 4.0.0 - 2019-12-12

    Breaking

    • Remove the callback option (#158) fb5161c
      Use the new .fetchInfo() method instead.
    • Rename the boxenOpts option to boxenOptions 39682de
    • Update boxen dependency
      This may affect your boxenOptions values.
    • Disable update notifications when NODE_ENV is test (#173) b1525e6

    Fixes

    • Avoid showing update notification if current version is the latest (#174) bc1721a
    • Fix the presented install command for globally installed npm packages (#165) bf73119

    v3.0.1...v4.0.0

  • 3.0.1 - 2019-07-02
    • Remove object spread to support node >=8.0.0 <8.6.0
  • 3.0.0 - 2019-05-10
    • Add supports for yarn
    • Drop support for Node 6
  • 2.5.0 - 2018-04-14

    Add ability to bypass isNpm check with shouldNotifyInNpmScript option.

from update-notifier GitHub release notes
Package name: verbosity from verbosity GitHub release notes
Package name: yargs
  • 13.3.0 - 2019-06-10

    Bug Fixes

    • deps: yargs-parser update addressing several parsing bugs (#1357) (e230d5b)

    Features

    • i18n: swap out os-locale dependency for simple inline implementation (#1356) (4dfa19b)
    • support defaultDescription for positional arguments (812048c)
  • 13.2.4 - 2019-05-13

    chore(release): 13.2.4

  • 13.2.2 - 2019-03-06

    chore(release): 13.2.2

  • 13.2.1 - 2019-02-18

    chore(release): 13.2.1

  • 13.2.0 - 2019-02-15

    chore(release): 13.2.0

  • 13.1.0 - 2019-02-12

    chore(release): 13.1.0

  • 13.0.0-candidate.0 - 2019-02-02
  • 12.0.5 - 2018-11-19

    chore(release): 12.0.5

  • 12.0.4 - 2018-11-10

    chore(release): 12.0.4

  • 12.0.3-candidate.0 - 2018-10-06
  • 12.0.2 - 2018-09-04
  • 12.0.1 - 2018-06-29
  • 12.0.0 - 2018-06-26
  • 12.0.0-candidate.0 - 2018-04-04
  • 11.1.1 - 2019-10-07
  • 11.1.0 - 2018-03-04
from yargs GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

… vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
@Omrisnyk
Copy link
Owner Author

Omrisnyk commented Nov 8, 2024

🎉 Snyk checks have passed. No issues have been found so far.

security/snyk check is complete. No issues have been found. (View Details)

license/snyk check is complete. No issues have been found. (View Details)

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants