Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Security upgrade jspdf from 2.3.1 to 2.5.2 #45

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

melipass
Copy link
Owner

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • appreclamos/package.json
    • appreclamos/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 703/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.2
Cross-site Scripting (XSS)
SNYK-JS-DOMPURIFY-8184974
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: jspdf The new version differs by 52 commits.
  • caf5159 Prepare 2.5.2 (#3769)
  • c87016c [Snyk] Upgrade @ babel/runtime from 7.14.6 to 7.23.2 (#3665)
  • 3e44dfa fix: upgrade core-js from 3.6.5 to 3.33.0 (#3664)
  • 7cc6373 fix: upgrade fflate from 0.4.8 to 0.8.1 (#3666)
  • 4dbdc6a chore: update dompurify version (#3768)
  • 5d09af9 Update README.md (#3501)
  • 2d9a919 Implement justifying for unicode fonts (#3285)
  • 7315ccb 2.5.1
  • a56c882 Fix Inefficient Regular Expression for setZoomMode (#3368)
  • a5f8fc9 Add integrity check for remote resource (#3348)
  • 513a4da fix canvg_context2d examples (#3358)
  • a29c092 Create SECURITY.md (#3364)
  • edd59d8 2.5.0
  • bcd9900 update contributing guidelines (#3341)
  • e2d687c Implement getLineWidth function (#3324)
  • 8094918 Fix closePath by using PDF command (#3304)
  • 99927b0 UPDATE: textWithLink method to cover multi-line annotated text (#3281)
  • 65f4027 Fixes to types (#3302)
  • f5a19b0 Support for text with newlines in Acroform TextFields (#3298)
  • af2d39d Bugfix arc closepath (#3295)
  • babeb35 Add horizontal scale option for text (#3294)
  • 57120de Fix not rendering multiple calls to html() (#3271)
  • cda5694 fix passing lineHeightFactor to the text method (#3283)
  • 57d6fb2 Ran npm run prettier to reformat code. (#3141)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

…ce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-DOMPURIFY-8184974
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants