Skip to content

Conversation

parseplatformorg
Copy link
Contributor

snyk-top-banner

Snyk has created this PR to fix 4 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860
  696  
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867
  541  
low severity Cross-site Scripting
SNYK-JS-SEND-7926862
  391  
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
  391  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting

Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title [Snyk] Fix for 4 vulnerabilities refactor: Fix for 4 vulnerabilities Sep 12, 2024
Copy link

Thanks for opening this pull request!

  • ❌ Please link an issue that describes the reason for this pull request, otherwise your pull request will be closed. Make sure to write it as Closes: #123 in the PR description, so I can recognize it.

Copy link

uffizzi-cloud bot commented Sep 12, 2024

Uffizzi Ephemeral Environment deployment-56196

⌚ Updated Sep 12, 2024, 08:04 UTC

☁️ https://app.uffizzi.com/github.com/parse-community/parse-dashboard/pull/2594

📄 View Application Logs etc.

What is Uffizzi? Learn more

@mtrezza mtrezza merged commit 7c64e3c into alpha Sep 12, 2024
9 checks passed
@mtrezza mtrezza deleted the snyk-fix-3fafa33a816bc859247a39a9eddd0f3e branch September 12, 2024 12:41
@parseplatformorg
Copy link
Contributor Author

🎉 This change has been released in version 6.0.0-alpha.13

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Sep 25, 2024
@parseplatformorg
Copy link
Contributor Author

🎉 This change has been released in version 6.0.0-beta.2

@parseplatformorg parseplatformorg added the state:released-beta Released as beta version label Oct 7, 2024
@parseplatformorg
Copy link
Contributor Author

🎉 This change has been released in version 6.0.0

@parseplatformorg parseplatformorg added the state:released Released as stable version label Oct 7, 2024
beiguancyc pushed a commit to beiguancyc/parse-dashboard that referenced this pull request Oct 8, 2024
* source: (70 commits)
  chore(release): 6.0.0 [skip ci]
  empty
  chore(release): 6.0.0-beta.2 [skip ci]
  empty
  chore(release): 6.0.0-alpha.16 [skip ci]
  fix: Dashboard not building for Docker platform arm64/v8 (parse-community#2534)
  refactor: Security upgrade node from 20.14.0-alpine3.20 to 20.17.0-alpine3.20 (parse-community#2593)
  chore(release): 6.0.0-alpha.15 [skip ci]
  feat: Add support for Node 22 (parse-community#2603)
  docs: Add info panel docs to README (parse-community#2601)
  chore(release): 6.0.0-alpha.14 [skip ci]
  feat: Add data panel to display object related data fetched via Cloud Function (parse-community#2584)
  chore(release): 6.0.0-alpha.13 [skip ci]
  fix: Internal classes `_User`, `_Role`, `_Installation` referenced with pointer don't appear in data browser filter dialog (parse-community#2599)
  refactor: Bump qs from 6.5.2 to 6.13.0 (parse-community#2595)
  refactor: Fix for 4 vulnerabilities (parse-community#2594)
  refactor: Bump webpack from 5.75.0 to 5.94.0 (parse-community#2588)
  chore(release): 6.0.0-alpha.12 [skip ci]
  fix: Filter string is erased when changing filter condition (parse-community#2586)
  refactor: Bump requirejs from 2.3.6 to 2.3.7 (parse-community#2582)
  ...

# Conflicts:
#	package-lock.json
vardhan0604 pushed a commit to vardhan0604/parse-dashboard that referenced this pull request Oct 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

state:released Released as stable version state:released-alpha Released as alpha version state:released-beta Released as beta version

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants