Skip to content

[Snyk] Security upgrade slim-select from 2.8.1 to 2.9.2 #53

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from

Conversation

iky95
Copy link
Owner

@iky95 iky95 commented Oct 15, 2024

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • frontend/package.json
    • frontend/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1
Cross-site Scripting (XSS)
SNYK-JS-SLIMSELECT-8161189
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: slim-select The new version differs by 90 commits.
  • 180429e package - version bump
  • ea51e95 output - updated output
  • b4d1061 package - version bump
  • ce5ad81 readme - minor update
  • 3e9c6f1 vite - updated css preprocessor. was giving
  • 1f7475a examples - minor countries update
  • 853cae4 package - minor updates
  • a9a1e40 examples - added countries example
  • b99e770 content location - could be null so updated to reflect.
  • 7267683 examples - added examples section and added countries as a first one
  • f8534f2 Merge pull request Letter training mode monkeytypegame/monkeytype#572 from Shoplifter/master
  • a1d1846 [FIX] use option.textContent instead of option.innerText
  • 873a8e5 use innerText instead of innerHTML for setting an option's text
  • e7e37e2 readme - minor update
  • d528701 package - version bump
  • 97847bf output - dist/docs update
  • e048f97 render - test update
  • f9639de search - allow deselect if single and setting is on
  • 79fbc57 deselect - extend larger area of click for X
  • 385e5d4 addable - updated to allow for enter to run addable function. added addableText. added error type as return to display in main content section.
  • 0ff10cf package - version updates
  • dd7ff9c test - update getOptions options
  • 1527841 test - added keep order test
  • 64a0a80 naming - updated function name

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

Copy link

Hey there and thank you for opening this pull request! 👋🏼

We require pull request titles to follow the Conventional Commits specification and it looks like your proposed title needs to be adjusted.

Details:

No release type found in pull request title "[Snyk] Security upgrade slim-select from 2.8.1 to 2.9.2". Add a prefix to indicate what kind of release this pull request corresponds to. For reference, see https://www.conventionalcommits.org/

Available types:
 - build
 - chore
 - ci
 - docs
 - feat
 - impr
 - fix
 - perf
 - refactor
 - revert
 - style
 - test

Copy link

This PR is stale. Please trigger a re-run of the PR check action.

@github-actions github-actions bot added the Stale label Oct 22, 2024
@github-actions github-actions bot closed this Oct 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants