Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Upgrade pdfkit from 0.11.0 to 0.15.0 #4

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Vict0rK
Copy link
Owner

@Vict0rK Vict0rK commented Jul 11, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade pdfkit from 0.11.0 to 0.15.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 7 versions ahead of your current version.

  • The recommended version was released on 4 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Use of Weak Hash
SNYK-JS-CRYPTOJS-6028119
574 No Known Exploit
Release notes
Package name: pdfkit
  • 0.15.0 - 2024-03-24
    • Add subset for PDF/UA
    • Fix for line breaks in list items (#1486)
    • Fix for soft hyphen not being replaced by visible hyphen if necessary (#457)
    • Optimize output files by ignoring identity transforms
    • Fix for Acroforms - setting an option to false will still apply the flag (#1495)
    • Fix for text extraction in PDFium-based viewers due to invalid ToUnicodeMap (#1498)
    • Remove deprecated write method
    • Drop support for Node.js < 18 and for browsers released before 2020
  • 0.14.0 - 2023-11-09
    • Add support for PDF/A-1b, PDF/A-1a, PDF/A-2b, PDF/A-2a, PDF/A-3b, PDF/A-3a
    • Update crypto-js to v4.2.0 (properly fix security issue)
  • 0.13.0 - 2021-10-24
    • Add tiling pattern support
  • 0.12.3 - 2021-08-01

    v0.12.3

  • 0.12.2 - 2021-08-01
  • 0.12.1 - 2021-04-10
    • Update crypto-js to v3.3 (fix security issue)
    • Update fontkit to 1.8.1
  • 0.12.0 - 2021-04-04
    • Add support for Embedded Files and File Attachment Annotations
    • Accessibility support
    • Replace integration tests by visual regression tests
    • Fix access permissions in PDF version 1.7ext3
    • Fix Buffer() is deprecation warning
    • Add forms.md to generate documentation files
    • Fix "@" in FontName
  • 0.11.0 - 2019-12-10
    • Fix infinite loop when an individual character is bigger than the width of the text.
    • Fix infinite loop when text is positioned after page right margin
    • Allow links in continued text to be stopped by setting link to null
    • Add support to interlaced PNG files
    • Do not emit _interopDefault helper in commonjs build
    • Fix gradient with multiple stops (#1045)
    • Set link annotation flag to print by default
    • Add support for AcroForms
    • Drop support for (uncommon) cid less fonts on standalone build (reduces bundle size)
from pdfkit GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade pdfkit from 0.11.0 to 0.15.0.

See this package in npm:
pdfkit

See this project in Snyk:
https://app.snyk.io/org/vict0rk/project/3382fd02-9bb8-4eee-9dc8-ffbda939458a?utm_source=github&utm_medium=referral&page=upgrade-pr
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants