Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Jul 5, 2021

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • greenlight-demo/package.json
    • greenlight-demo/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-D3COLOR-1076592
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: d3 The new version differs by 189 commits.

See the full diff

Package name: dagre-d3 The new version differs by 32 commits.
  • 92981c1 Update to 0.6.4
  • e1a00e5 Update karma-coverage
  • fd4aca1 Merge pull request #376 from gordonwoodhull/master
  • 3cd2e2e use D3v5 in demos
  • 8250c54 upgrade to D3v5
  • 6e3f176 Update lodash
  • 837b287 Merge pull request #370 from jo2/patch-1
  • e013acc Fix typo in demo
  • 3e26aa2 Update karma, mocha, browser-sync, watchify
  • 5c0f084 Update ESLint
  • 5450627 Merge pull request #350 from jmcarp/d3v3-compat-merge
  • f7351d9 Skip call to selection.merge if undefined.
  • c00ac0b Merge pull request #324 from laof/master
  • 59dcd65 Bump version and set as pre-release
  • d12be3c Prep v0.6.3 release
  • 17da4e6 Merge pull request #329 from mwaldstein/master
  • 06bf046 Bump version and set as pre-release
  • ed6cf89 Prep v0.6.2 release
  • a36e8bd Update to browserify 16.2.3
  • dc1e409 Update to browser-sync 2.24.7
  • 0a5cc72 Merge pull request #342 from akosel/fix-render-transitions
  • a303088 Fix render transitions
  • 3dd2efe Update to Karma 3.0.0
  • 6dc7ee3 npm audit fix

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

… to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-D3COLOR-1076592
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant