[Snyk] Upgrade video.js from 7.7.5 to 7.21.3

[snyk-bot]

Snyk has created this PR to upgrade video.js from 7.7.5 to 7.21.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 67 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2023-02-27.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-XMLDOM-3042242	425/1000 Why? CVSS 8.5	No Known Exploit
	Improper Input Validation SNYK-JS-XMLDOM-3092935	425/1000 Why? CVSS 8.5	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-VIDEOJS-1533429	425/1000 Why? CVSS 8.5	Proof of Concept
	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	425/1000 Why? CVSS 8.5	No Known Exploit
	Improper Input Validation SNYK-JS-XMLDOM-1534562	425/1000 Why? CVSS 8.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: video.js

• 7.21.3 - 2023-02-27
  

  7.21.3 (2023-02-27)

  Chores

  • package: update to @ videojs/http-streaming 2.16.2 (#8161) (2b06194)

  netlify preview for this version

• 7.21.2 - 2023-01-31
  

  7.21.2 (2023-01-31)

  Chores

  • Add missing translations (#8099) (2fe3aba), closes #8083 #8091
  • package: update to @ videojs/http-streaming 2.16.0 (#8098) (cb77739)

  netlify preview for this version

• 7.21.1 - 2022-11-21
  

  7.21.1 (2022-11-21)

  Bug Fixes

  • deprecate the extend() function (#7944) (b58a220)
  • last timeout in queueTrigger() never clears map (#7964) (e49286a)
  • update @ videojs/http-streaming to 2.15.1 (#8010) (1c2be96), closes #7998 #7958

  Chores

  • fix mixed content warnings from netlify (#7946) (ce1baba)

  netlify preview for this version

• 7.21.0 - 2022-09-15
• 7.20.3 - 2022-09-09
• 7.20.2 - 2022-07-28
• 7.20.1 - 2022-05-31
• 7.20.0 - 2022-05-20
• 7.19.2 - 2022-04-20
• 7.19.1 - 2022-04-15
• 7.19.0 - 2022-03-21
• 7.18.1 - 2022-02-23
• 7.18.0 - 2021-12-20
• 7.17.3 - 2021-12-10
• 7.17.2 - 2021-12-08
• 7.17.1 - 2021-11-17
• 7.17.0 - 2021-11-10
• 7.16.0 - 2021-10-01
• 7.15.7 - 2021-10-01
• 7.15.6 - 2021-09-22
• 7.15.5 - 2021-09-21
• 7.15.4 - 2021-08-25
• 7.15.3 - 2021-08-24
• 7.15.2 - 2021-08-23
• 7.15.1 - 2021-08-23
• 7.15.0 - 2021-07-28
• 7.14.3 - 2021-07-26
• 7.14.2 - 2021-07-19
• 7.14.1 - 2021-07-14
• 7.14.0 - 2021-06-30
• 7.13.4 - 2021-06-30
• 7.13.3 - 2021-06-23
• 7.13.2 - 2021-06-22
• 7.13.1 - 2021-06-14
• 7.13.0 - 2021-06-11
• 7.12.4 - 2021-06-02
• 7.12.3 - 2021-05-20
• 7.12.2 - 2021-05-19
• 7.12.1 - 2021-04-13
• 7.12.0 - 2021-04-07
• 7.11.8 - 2021-03-23
• 7.11.7 - 2021-03-12
• 7.11.6 - 2021-03-09
• 7.11.5 - 2021-02-04
• 7.11.4 - 2021-01-26
• 7.11.3 - 2021-01-25
• 7.11.2 - 2021-01-14
• 7.11.1 - 2020-12-22
• 7.11.0 - 2020-11-16
• 7.10.2 - 2020-11-04
• 7.10.1 - 2020-10-15
• 7.10.0 - 2020-10-14
• 7.9.7 - 2020-10-06
• 7.9.6 - 2020-10-01
• 7.9.5 - 2020-09-10
• 7.9.4 - 2020-09-10
• 7.9.3 - 2020-08-17
• 7.9.2 - 2020-07-20
• 7.9.1 - 2020-07-13
• 7.9.0 - 2020-07-10
• 7.8.4 - 2020-07-08
• 7.8.3 - 2020-05-28
• 7.8.2 - 2020-05-26
• 7.8.1 - 2020-04-16
• 7.8.0 - 2020-04-06
• 7.7.7 - 2020-05-26
• 7.7.6 - 2020-03-25
• 7.7.5 - 2020-02-19

from video.js GitHub release notes

Commit messages

Package name: video.js

• 7c3d3f4 7.21.3
• 2b06194 chore(package): update to @ videojs/http-streaming 2.16.2 (#8161)
• 82f0250 7.21.2
• 2fe3aba chore: Add missing translations (#8099)
• cb77739 chore(package): update to @ videojs/http-streaming 2.16.0 (#8098)
• 4f8227d 7.21.1
• 1c2be96 fix: update @ videojs/http-streaming to 2.15.1 (#8010)
• e49286a fix: last timeout in queueTrigger() never clears map (#7964)
• b58a220 fix: deprecate the extend() function (#7944)
• ce1baba chore: fix mixed content warnings from netlify (#7946)
• 5bcf4d1 7.21.0
• 12b9e8d feat(lang): Add Bengali (bn) translations (#7823)
• e47f48c fix(lang): Update Occitan translation (#7888)
• 9e38ca4 feat: update VHS to 2.15.0 (#7929)
• 4e2f8ad 7.20.3
• d736541 fix: allow for techs that init slowly in rvfc (#7864)
• ed4524e docs: update FAQ.md to match change in #7892 (#7893)
• 9b81afe fix: Use timeupdate as well as rvfc/raf for cues (#7918)
• 2810507 fix(package): Update to @ videojs/http-streaming 2.14.3 and videojs-vtt.js 0.15.4 (#7907)
• 3c70573 chore: update FAQ redirect (#7892)
• 0211d73 chore(docs): use https URLs in noUITitleAtttributes example (#7809)
• 9ca2e87 refactor: fix typo in player.js (#7805)
• d31cd1b 7.20.2
• 76b8ee8 fix(lang): Update Polish language (#7821)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs