Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 4 vulnerabilities #25

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

Roseymr
Copy link
Owner

@Roseymr Roseymr commented Oct 19, 2024

snyk-top-banner

Snyk has created this PR to fix 4 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • libs/ledger-live-common/package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-8187303
  170  
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VUE-8219889
  52  
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VUECOMPILERSFC-8219886
  52  
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VUETEMPLATECOMPILER-8219888
  52  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/[email protected] None +1 27.5 kB nicolo-ribaudo
npm/@babel/[email protected] environment, filesystem +68 5.62 MB nicolo-ribaudo
npm/@babel/[email protected] Transitive: environment +9 2.61 MB nicolo-ribaudo
npm/@babel/[email protected] Transitive: environment +19 4.77 MB nicolo-ribaudo
npm/@babel/[email protected] None 0 262 kB nicolo-ribaudo
npm/@braze/[email protected] None 0 278 kB appboy
npm/@braze/[email protected] None 0 454 kB vismayasp
npm/@cardano-foundation/[email protected] None 0 749 kB jan.mazak
npm/@celo/[email protected] None +1 321 kB alecps
npm/@celo/[email protected] filesystem, network +2 3.17 MB alecps
npm/@celo/[email protected] None +1 700 kB alecps
npm/@celo/[email protected] None +1 252 kB alecps
npm/@celo/[email protected] None +2 287 kB alecps
npm/@changesets/[email protected] Transitive: environment, network +2 98 kB changesets-release-bot
npm/@changesets/[email protected] environment, filesystem, shell +17 1.02 MB changesets-release-bot
npm/@codemirror/[email protected] None +2 749 kB marijn
npm/@codemirror/[email protected] None +1 1.57 MB marijn
npm/@commitlint/[email protected] Transitive: environment, filesystem +16 358 kB escapedcat
npm/@commitlint/[email protected] None 0 9.61 kB escapedcat
npm/@commitlint/[email protected] Transitive: environment, filesystem +8 233 kB escapedcat
npm/@cosmjs/[email protected] None +3 162 kB webmaster128
npm/@cosmjs/[email protected] None +3 213 kB webmaster128
npm/@cosmjs/[email protected] Transitive: network +11 3.03 MB webmaster128
npm/@craftamap/[email protected] filesystem 0 26.7 kB craftamap
npm/@crypto-org-chain/[email protected] Transitive: network +22 10.5 MB calvinaco
npm/@dfinity/[email protected] network 0 1.27 MB krpeacock
npm/@dfinity/[email protected] None 0 647 kB krpeacock
npm/@dfinity/[email protected] None 0 140 kB krpeacock
npm/@electron/[email protected] filesystem, shell 0 54.3 kB electron-cfa
npm/@elrondnetwork/[email protected] None 0 179 kB andreibancioiu
npm/@elrondnetwork/[email protected] None +1 629 kB lucian.mincu
npm/@emotion/[email protected] environment 0 17.1 kB emotion-release-bot
npm/@emotion/[email protected] environment +1 75.3 kB emotion-release-bot
npm/@ethersproject/[email protected] Transitive: network +16 1.92 MB ricmoo
npm/@ethersproject/[email protected] None +2 180 kB ricmoo
npm/@ethersproject/[email protected] None 0 452 kB ricmoo
npm/@expo/[email protected] environment, eval, filesystem +11 1.96 MB evanbacon
npm/@expo/[email protected] environment, filesystem 0 445 kB bycedric
npm/@faker-js/[email protected] None 0 10.2 MB shinigami92
npm/@floating-ui/[email protected] None +2 215 kB atomiks
npm/@formatjs/[email protected] None +4 2.94 MB longlho
npm/@formatjs/[email protected] None +2 1.3 MB longlho
npm/@formatjs/[email protected] None +2 5.3 MB longlho
npm/@hashgraph/[email protected] environment, filesystem Transitive: network +4 9.91 MB danielakhterov
npm/@helium/[email protected] None 0 38.7 kB peroni-nova
npm/@helium/[email protected] None 0 2.25 MB allenan
npm/@helium/[email protected] None 0 160 kB peroni-nova
npm/[email protected] filesystem 0 325 kB simenb
npm/[email protected] filesystem, unsafe 0 120 kB evilebottnawi
npm/[email protected] environment, filesystem, shell +6 2.23 MB kettanaito

🚮 Removed packages: npm/[email protected], npm/[email protected]

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants