Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 1 vulnerabilities #14

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 1 vulnerabilities #14

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link
Contributor

@snyk-bot snyk-bot commented Sep 2, 2021

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 520/1000
Why? Has a fix available, CVSS 5.9		 Denial of Service
SNYK-JS-NODEFETCH-674311		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: expo The new version differs by 250 commits.
  • f84d584 Publish packages
  • b64a850 Publish packages
  • 6a36832 [expo-firebase-analytics][docs] add setClientId method for Expo Go (#12520)
  • c6120c8 [android] Add changelog for new versionCode
  • 6d34432 [github] Install node_modules also
  • bf8ac58 [github] Always install pods in ad-hoc-client-shell-app-ios for now
  • 727a270 [ios] Bump Expo Go version
  • 14cce96 [home][ios][android] Update dev and prod home
  • 78bf2c9 [home] Only disable screens in home on Android
  • e3cafc5 [bare-expo] Update lockfile for expo-facebook changes
  • 9c6693e Publish packages
  • 5946ef1 [permissions] guard mounted state (#12482)
  • d7881c0 [app-loading] Fix dependency on expo-splash-screen to match bundledNativeModules.json
  • 0f00ae9 Update yarn.lock
  • 50e4ad7 [expo] tree-shake Logs module in production bundles (#12511)
  • d2af218 [expo] Remove lodash (#12507)
  • 1ea8564 [android][ios] Bump versions
  • f6222ee [ios][android] Update prod home
  • 87fc3a6 [home] Publish dev-home
  • 57bcb87 [home] Disable screens
  • 79b3b9f [expo-sensors] Added permissions (#12501)
  • ba03b0c [native-component-list] fix Pedometer type (#12518)
  • 99fd234 [expo-sensors] Pedometer: replace custom listener return type with unimodules Subscription (#12497)
  • 8c33135 [sensors] add doc comments in Pedometer source (#12335)

See the full diff

Package name: expo-constants The new version differs by 250 commits.
  • e362887 Publish packages
  • 8094edf [iOS][detox][bare-expo] Fix detox builds (#11645)
  • 677d5e9 [dev-menu] Fix typo `CRAETE` -> `CREATE` (#11639)
  • 377f169 [docs] Fix a few typos in iOS distribution docs (#11643)
  • 7f5de0b [expo-dev-launcher] Add installation guide (#11223)
  • 66808c0 created ads-admob plugin (#11636)
  • eff6a5b created splash-screen plugin (#11634)
  • 4f897b4 created expo-notifications plugin (#11633)
  • 199a7a5 created expo-facebook plugin (#11624)
  • 149c954 created expo-branch plugin (#11623)
  • 4cc9d1b Publish expo-av
  • 4cf0936 Standardize gitignore files in templates (#11622)
  • ec4c554 [EMS] Create dev tooling for config plugins (#11574)
  • aa910fa [android] migrate OkHttp cache to application cache directory (#11600)
  • c9f792a [network] fix: ip address not retrieved if using cellular data (#11534)
  • d939464 [expo-updates] stop expecting data and publicManifest root level keys for EAS manifests (#11613)
  • 1887a37 [expo-updates] fix origin-relative URL support in assetUrlOverride (#11601)
  • fe2d848 [docs] fix personal access tokens link
  • c0afa77 [android] remove OkHttp interceptors (#11599)
  • f97ddd0 [expo-updates] add unit tests for manifest classes (#11562)
  • b655ff2 [docs] grey android notification icons
  • af449a8 [docs] consolidate push notification FAQ to one page
  • 9910dab [docs] replace expo-permissions calls with expo-notifications calls
  • 9713a7b [docs] Import missing install section on app-loading (#11595)

See the full diff

Package name: expo-font The new version differs by 250 commits.
  • e362887 Publish packages
  • 8094edf [iOS][detox][bare-expo] Fix detox builds (#11645)
  • 677d5e9 [dev-menu] Fix typo `CRAETE` -> `CREATE` (#11639)
  • 377f169 [docs] Fix a few typos in iOS distribution docs (#11643)
  • 7f5de0b [expo-dev-launcher] Add installation guide (#11223)
  • 66808c0 created ads-admob plugin (#11636)
  • eff6a5b created splash-screen plugin (#11634)
  • 4f897b4 created expo-notifications plugin (#11633)
  • 199a7a5 created expo-facebook plugin (#11624)
  • 149c954 created expo-branch plugin (#11623)
  • 4cc9d1b Publish expo-av
  • 4cf0936 Standardize gitignore files in templates (#11622)
  • ec4c554 [EMS] Create dev tooling for config plugins (#11574)
  • aa910fa [android] migrate OkHttp cache to application cache directory (#11600)
  • c9f792a [network] fix: ip address not retrieved if using cellular data (#11534)
  • d939464 [expo-updates] stop expecting data and publicManifest root level keys for EAS manifests (#11613)
  • 1887a37 [expo-updates] fix origin-relative URL support in assetUrlOverride (#11601)
  • fe2d848 [docs] fix personal access tokens link
  • c0afa77 [android] remove OkHttp interceptors (#11599)
  • f97ddd0 [expo-updates] add unit tests for manifest classes (#11562)
  • b655ff2 [docs] grey android notification icons
  • af449a8 [docs] consolidate push notification FAQ to one page
  • 9910dab [docs] replace expo-permissions calls with expo-notifications calls
  • 9713a7b [docs] Import missing install section on app-loading (#11595)

See the full diff

Package name: expo-linking The new version differs by 250 commits.
  • e362887 Publish packages
  • 8094edf [iOS][detox][bare-expo] Fix detox builds (#11645)
  • 677d5e9 [dev-menu] Fix typo `CRAETE` -> `CREATE` (#11639)
  • 377f169 [docs] Fix a few typos in iOS distribution docs (#11643)
  • 7f5de0b [expo-dev-launcher] Add installation guide (#11223)
  • 66808c0 created ads-admob plugin (#11636)
  • eff6a5b created splash-screen plugin (#11634)
  • 4f897b4 created expo-notifications plugin (#11633)
  • 199a7a5 created expo-facebook plugin (#11624)
  • 149c954 created expo-branch plugin (#11623)
  • 4cc9d1b Publish expo-av
  • 4cf0936 Standardize gitignore files in templates (#11622)
  • ec4c554 [EMS] Create dev tooling for config plugins (#11574)
  • aa910fa [android] migrate OkHttp cache to application cache directory (#11600)
  • c9f792a [network] fix: ip address not retrieved if using cellular data (#11534)
  • d939464 [expo-updates] stop expecting data and publicManifest root level keys for EAS manifests (#11613)
  • 1887a37 [expo-updates] fix origin-relative URL support in assetUrlOverride (#11601)
  • fe2d848 [docs] fix personal access tokens link
  • c0afa77 [android] remove OkHttp interceptors (#11599)
  • f97ddd0 [expo-updates] add unit tests for manifest classes (#11562)
  • b655ff2 [docs] grey android notification icons
  • af449a8 [docs] consolidate push notification FAQ to one page
  • 9910dab [docs] replace expo-permissions calls with expo-notifications calls
  • 9713a7b [docs] Import missing install section on app-loading (#11595)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic

@snyk-bot
fix: package.json to reduce vulnerabilities
2acc6e7 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NODEFETCH-674311
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
1 participant
@snyk-bot