[Snyk] Upgrade react-animated-cursor from 2.2.0 to 2.4.0

[snyk-bot]

Snyk has created this PR to upgrade react-animated-cursor from 2.2.0 to 2.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-03-19.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-STRIPTAGS-1312310	185/1000 Why? CVSS 3.7	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-animated-cursor

• 2.4.0 - 2022-03-19
• 2.3.0 - 2022-03-18
• 2.2.0 - 2021-06-18

from react-animated-cursor GitHub release notes

Commit messages

Package name: react-animated-cursor

• 7bfd618 2.4.0
• b014fcd Parcel 2 updates, package rebuild
• 0ac2bc2 updated build and peer deps
• b972dd4 Merge pull request Bump minimist from 1.2.5 to 1.2.6 #19 from stephenscaff/test-react-latest
• ff682e8 updated and test latest react, appended peer deps
• 0bc835d 2.3.0
• d583bf3 Merge pull request Bump node-forge from 1.2.1 to 1.3.0 #18 from stephenscaff/parcel-update
• a1bfed2 updated parcel and deps
• 84435da Merge pull request responsive #17 from stephenscaff/feature-clickables-as-props
• ca0a30f removed demo test props
• f20dda2 Feature: Clickable selectors as props
• c3ffc5b Merge branch 'master' of https://github.com/stephenscaff/react-animated-cursor
• 089ec7e Merge pull request responsive #15 from stephenscaff/dependabot/npm_and_yarn/ajv-6.12.6
• 42ae6b5 Merge pull request fixed view chatbox #13 from Valerioageno/patch-1
• a9453a8 Merge pull request thumb items responsive #12 from stephenscaff/dependabot/npm_and_yarn/color-string-1.6.0
• c998f39 Bump ajv from 6.12.0 to 6.12.6
• 5f4b3a1 Check if device is an iPad on safari
• 5f5d5a5 Bump color-string from 1.5.4 to 1.6.0
• 219a1c3 Merge pull request fixed view chatbox #11 from stephenscaff/dependabot/npm_and_yarn/path-parse-1.0.7
• a31513b Merge pull request fixed problems #10 from stephenscaff/dependabot/npm_and_yarn/ws-5.2.3
• 4eea067 Bump path-parse from 1.0.6 to 1.0.7
• 0f9a400 Bump ws from 5.2.2 to 5.2.3

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs