Skip to content

[Snyk] Upgrade react-scripts from 4.0.1 to 4.0.3 #30

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

nejidevelops
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade react-scripts from 4.0.1 to 4.0.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 2 versions ahead of your current version.

  • The recommended version was released on 4 years ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Improper Handling of Extra Parameters
SNYK-JS-FOLLOWREDIRECTS-6141137
130 Proof of Concept
high severity Remote Memory Exposure
SNYK-JS-DNSPACKET-1293563
130 No Known Exploit
high severity Prototype Pollution
SNYK-JS-IMMER-1019369
130 Proof of Concept
high severity Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864
130 Proof of Concept
high severity Prototype Pollution
SNYK-JS-ASYNC-2441827
130 Proof of Concept
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860
130 No Known Exploit
high severity Improper Input Validation
SNYK-JS-URLPARSE-2407770
130 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
130 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
130 No Known Exploit
medium severity Information Exposure
SNYK-JS-EVENTSOURCE-2823375
130 Proof of Concept
medium severity Open Redirect
SNYK-JS-EXPRESS-6474509
130 No Known Exploit
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867
130 No Known Exploit
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181
130 Proof of Concept
medium severity Command Injection
SNYK-JS-REACTDEVUTILS-1083268
130 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
130 Proof of Concept
medium severity Improper Input Validation
SNYK-JS-URLPARSE-1078283
130 No Known Exploit
medium severity Open Redirect
SNYK-JS-URLPARSE-1533425
130 Proof of Concept
medium severity Access Restriction Bypass
SNYK-JS-URLPARSE-2401205
130 Proof of Concept
medium severity Authorization Bypass
SNYK-JS-URLPARSE-2407759
130 Proof of Concept
low severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346
130 No Known Exploit
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795
130 Proof of Concept
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462
130 Proof of Concept
medium severity Authorization Bypass Through User-Controlled Key
SNYK-JS-URLPARSE-2412697
130 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SEND-7926862
130 No Known Exploit
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
130 No Known Exploit
Release notes
Package name: react-scripts
  • 4.0.3 - 2021-02-22
  • 4.0.2 - 2021-02-03
  • 4.0.1 - 2020-11-23
from react-scripts GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade react-scripts from 4.0.1 to 4.0.3.

See this package in npm:
react-scripts

See this project in Snyk:
https://app.snyk.io/org/newtonombese1/project/440e6a9d-4fca-4917-a4e6-bdbc889565a3?utm_source=github&utm_medium=referral&page=upgrade-pr
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants