Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 3 vulnerabilities #20

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 3 vulnerabilities #20

wants to merge 1 commit into from

Conversation

kathawala
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 539/1000
Why? Has a fix available, CVSS 6.5		 Information Exposure
SNYK-JS-NODEFETCH-2342118		 Yes No Known Exploit
medium severity 520/1000
Why? Has a fix available, CVSS 5.9		 Denial of Service
SNYK-JS-NODEFETCH-674311		 Yes No Known Exploit
high severity 619/1000
Why? Has a fix available, CVSS 8.1		 Remote Code Execution (RCE)
SNYK-JS-SHELLQUOTE-1766506		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: expo The new version differs by 250 commits.
  • f84d584 Publish packages
  • b64a850 Publish packages
  • 6a36832 [expo-firebase-analytics][docs] add setClientId method for Expo Go (#12520)
  • c6120c8 [android] Add changelog for new versionCode
  • 6d34432 [github] Install node_modules also
  • bf8ac58 [github] Always install pods in ad-hoc-client-shell-app-ios for now
  • 727a270 [ios] Bump Expo Go version
  • 14cce96 [home][ios][android] Update dev and prod home
  • 78bf2c9 [home] Only disable screens in home on Android
  • e3cafc5 [bare-expo] Update lockfile for expo-facebook changes
  • 9c6693e Publish packages
  • 5946ef1 [permissions] guard mounted state (#12482)
  • d7881c0 [app-loading] Fix dependency on expo-splash-screen to match bundledNativeModules.json
  • 0f00ae9 Update yarn.lock
  • 50e4ad7 [expo] tree-shake Logs module in production bundles (#12511)
  • d2af218 [expo] Remove lodash (#12507)
  • 1ea8564 [android][ios] Bump versions
  • f6222ee [ios][android] Update prod home
  • 87fc3a6 [home] Publish dev-home
  • 57bcb87 [home] Disable screens
  • 79b3b9f [expo-sensors] Added permissions (#12501)
  • ba03b0c [native-component-list] fix Pedometer type (#12518)
  • 99fd234 [expo-sensors] Pedometer: replace custom listener return type with unimodules Subscription (#12497)
  • 8c33135 [sensors] add doc comments in Pedometer source (#12335)

See the full diff

Package name: expo-constants The new version differs by 250 commits.
  • e362887 Publish packages
  • 8094edf [iOS][detox][bare-expo] Fix detox builds (#11645)
  • 677d5e9 [dev-menu] Fix typo `CRAETE` -> `CREATE` (#11639)
  • 377f169 [docs] Fix a few typos in iOS distribution docs (#11643)
  • 7f5de0b [expo-dev-launcher] Add installation guide (#11223)
  • 66808c0 created ads-admob plugin (#11636)
  • eff6a5b created splash-screen plugin (#11634)
  • 4f897b4 created expo-notifications plugin (#11633)
  • 199a7a5 created expo-facebook plugin (#11624)
  • 149c954 created expo-branch plugin (#11623)
  • 4cc9d1b Publish expo-av
  • 4cf0936 Standardize gitignore files in templates (#11622)
  • ec4c554 [EMS] Create dev tooling for config plugins (#11574)
  • aa910fa [android] migrate OkHttp cache to application cache directory (#11600)
  • c9f792a [network] fix: ip address not retrieved if using cellular data (#11534)
  • d939464 [expo-updates] stop expecting data and publicManifest root level keys for EAS manifests (#11613)
  • 1887a37 [expo-updates] fix origin-relative URL support in assetUrlOverride (#11601)
  • fe2d848 [docs] fix personal access tokens link
  • c0afa77 [android] remove OkHttp interceptors (#11599)
  • f97ddd0 [expo-updates] add unit tests for manifest classes (#11562)
  • b655ff2 [docs] grey android notification icons
  • af449a8 [docs] consolidate push notification FAQ to one page
  • 9910dab [docs] replace expo-permissions calls with expo-notifications calls
  • 9713a7b [docs] Import missing install section on app-loading (#11595)

See the full diff

Package name: expo-font The new version differs by 250 commits.
  • e362887 Publish packages
  • 8094edf [iOS][detox][bare-expo] Fix detox builds (#11645)
  • 677d5e9 [dev-menu] Fix typo `CRAETE` -> `CREATE` (#11639)
  • 377f169 [docs] Fix a few typos in iOS distribution docs (#11643)
  • 7f5de0b [expo-dev-launcher] Add installation guide (#11223)
  • 66808c0 created ads-admob plugin (#11636)
  • eff6a5b created splash-screen plugin (#11634)
  • 4f897b4 created expo-notifications plugin (#11633)
  • 199a7a5 created expo-facebook plugin (#11624)
  • 149c954 created expo-branch plugin (#11623)
  • 4cc9d1b Publish expo-av
  • 4cf0936 Standardize gitignore files in templates (#11622)
  • ec4c554 [EMS] Create dev tooling for config plugins (#11574)
  • aa910fa [android] migrate OkHttp cache to application cache directory (#11600)
  • c9f792a [network] fix: ip address not retrieved if using cellular data (#11534)
  • d939464 [expo-updates] stop expecting data and publicManifest root level keys for EAS manifests (#11613)
  • 1887a37 [expo-updates] fix origin-relative URL support in assetUrlOverride (#11601)
  • fe2d848 [docs] fix personal access tokens link
  • c0afa77 [android] remove OkHttp interceptors (#11599)
  • f97ddd0 [expo-updates] add unit tests for manifest classes (#11562)
  • b655ff2 [docs] grey android notification icons
  • af449a8 [docs] consolidate push notification FAQ to one page
  • 9910dab [docs] replace expo-permissions calls with expo-notifications calls
  • 9713a7b [docs] Import missing install section on app-loading (#11595)

See the full diff

Package name: expo-linking The new version differs by 250 commits.
  • e362887 Publish packages
  • 8094edf [iOS][detox][bare-expo] Fix detox builds (#11645)
  • 677d5e9 [dev-menu] Fix typo `CRAETE` -> `CREATE` (#11639)
  • 377f169 [docs] Fix a few typos in iOS distribution docs (#11643)
  • 7f5de0b [expo-dev-launcher] Add installation guide (#11223)
  • 66808c0 created ads-admob plugin (#11636)
  • eff6a5b created splash-screen plugin (#11634)
  • 4f897b4 created expo-notifications plugin (#11633)
  • 199a7a5 created expo-facebook plugin (#11624)
  • 149c954 created expo-branch plugin (#11623)
  • 4cc9d1b Publish expo-av
  • 4cf0936 Standardize gitignore files in templates (#11622)
  • ec4c554 [EMS] Create dev tooling for config plugins (#11574)
  • aa910fa [android] migrate OkHttp cache to application cache directory (#11600)
  • c9f792a [network] fix: ip address not retrieved if using cellular data (#11534)
  • d939464 [expo-updates] stop expecting data and publicManifest root level keys for EAS manifests (#11613)
  • 1887a37 [expo-updates] fix origin-relative URL support in assetUrlOverride (#11601)
  • fe2d848 [docs] fix personal access tokens link
  • c0afa77 [android] remove OkHttp interceptors (#11599)
  • f97ddd0 [expo-updates] add unit tests for manifest classes (#11562)
  • b655ff2 [docs] grey android notification icons
  • af449a8 [docs] consolidate push notification FAQ to one page
  • 9910dab [docs] replace expo-permissions calls with expo-notifications calls
  • 9713a7b [docs] Import missing install section on app-loading (#11595)

See the full diff

Package name: expo-splash-screen The new version differs by 250 commits.
  • 5b57d1f [expo-clipboard] Revert CHANGELOG upate
  • eb28513 [expo-clipboard] Revert version bump
  • 20fd5d7 Publish packages
  • 6084877 [tools] Stop prebuilding expo-face-detector and expo-updates for now
  • 72297db Publish packages
  • 96b9c55 [jest-expo] Update mocks
  • 7f92feb [ReactAndroid] Commit desirable changes from "et update-react-native"
  • 51620fb [guides] Update branch in universe
  • 215f48c Update CHANGELOG
  • 4c39342 [bare-expo][yarn] Update lockfiles
  • 88c9a9c [ios][android] Update @ react-native-community/datetimepicker (#12171)
  • 5c57f78 [ios][android] Update react-native-safe-area-context (#12170)
  • 57e6889 [ios][android] Update @ react-native-community/viewpager and add react-native-pager-view to bundledNativeModules.json (#12169)
  • 59c8df8 [Expo Go] Set iOS dev menu above LogBox (#12154)
  • a347f72 [auth-session] Use sync random method (#10298)
  • 0f652e3 [docs] Copy Font docs changes to unversioned
  • abd1549 [docs] fontDisplay -> display (#11857)
  • 77a3158 [docs] Improve wording (#11800)
  • 4b31d70 [docs] Fix typo (#11834)
  • 829a522 [docs] Update expo-speech documentation for Android (#11965)
  • b062557 [docs] Icons: fix iconStyle default, fix links (#12155)
  • e2652bf [ios][android] Update FBAudienceNetwork in expo-ads-facebook (#12133)
  • ad8b588 [docs] ensure that <code> in links is also colored (#12158)
  • aacdc29 [expo-dev-menu] Add auth & profile screen (#11915)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service
🦉 Remote Code Execution (RCE)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@kathawala @snyk-bot