Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade ngx-markdown from 16.0.0 to 17.0.0 #222

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

EndyKaufman
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
⚠️ Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Template Injection
SNYK-JS-DOMPURIFY-6474511
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: ngx-markdown The new version differs by 8 commits.
  • 60a1096 17.0.0
  • 3a68d38 Update marked lib to 9.0.0 (#474) (#479)
  • 53648ca feat!: update to angular 17 (#480)
  • d5a7e3e Update emoji-toolkit lib to 8.0.0 (#478)
  • 3ca7b61 Render only elements within the component/directive (#477)
  • 4130a9e Update mermaid.js lib to 10.6.0
  • a53dff3 Bump semver from 5.7.1 to 5.7.2 (#464)
  • 42af5e7 Bump socket.io-parser from 4.2.2 to 4.2.3 (#455)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-DOMPURIFY-6474511
Copy link

🌲 Cypress report

Passes: 0, failures: 4, pending: 0, skipped: 10, other: 0.
State Description
fail Filepath: cypress/integration/new-api/check-array-with-boolean.spec.js
Title: Check array with boolean add new boolean invalid value as string
Error: CypressError: cy.visit() failed trying to load: http://localhost:3000/ The response we received from your web server was: > 404: Not Found This was considered a failure because the status code was not 2xx. If you do not want status codes to cause failures pass the option: failOnStatusCode: false Because this error occurred during a before each hook we are skipping the remaining tests in the current suite: Check array with boolean
skipped Filepath: cypress/integration/new-api/check-array-with-boolean.spec.js
Title: Check array with boolean change valid value to invalid
Error: null
skipped Filepath: cypress/integration/new-api/check-array-with-boolean.spec.js
Title: Check array with boolean add new boolean invalid value as string and after change it to correct boolean and save
Error: null
fail Filepath: cypress/integration/new-api/check-common-logic.spec.js
Title: Check common logic display errors after first init
Error: CypressError: cy.visit() failed trying to load: http://localhost:3000/ The response we received from your web server was: > 404: Not Found This was considered a failure because the status code was not 2xx. If you do not want status codes to cause failures pass the option: failOnStatusCode: false Because this error occurred during a before each hook we are skipping the remaining tests in the current suite: Check common logic
skipped Filepath: cypress/integration/new-api/check-common-logic.spec.js
Title: Check common logic remove all errors after load default data
Error: null
skipped Filepath: cypress/integration/new-api/check-common-logic.spec.js
Title: Check common logic remove all errors after twice load default data
Error: null
skipped Filepath: cypress/integration/new-api/check-common-logic.spec.js
Title: Check common logic display errors after clear all inputs
Error: null
skipped Filepath: cypress/integration/new-api/check-common-logic.spec.js
Title: Check common logic validate and get json data for save
Error: null
fail Filepath: cypress/integration/new-api/check-external-errors.spec.js
Title: Check external errors load default data and set external errors
Error: CypressError: cy.visit() failed trying to load: http://localhost:3000/ The response we received from your web server was: > 404: Not Found This was considered a failure because the status code was not 2xx. If you do not want status codes to cause failures pass the option: failOnStatusCode: false Because this error occurred during a before each hook we are skipping the remaining tests in the current suite: Check external errors
skipped Filepath: cypress/integration/new-api/check-external-errors.spec.js
Title: Check external errors load default data and set and clear external errors
Error: null
skipped Filepath: cypress/integration/new-api/check-external-errors.spec.js
Title: Check external errors load default data and clear field with ValidateIf logic and set external errors
Error: null
fail Filepath: cypress/integration/new-api/check-validate-if-logic.spec.js
Title: Check ValidateIf logic load default data and clear field with ValidateIf logic
Error: CypressError: cy.visit() failed trying to load: http://localhost:3000/ The response we received from your web server was: > 404: Not Found This was considered a failure because the status code was not 2xx. If you do not want status codes to cause failures pass the option: failOnStatusCode: false Because this error occurred during a before each hook we are skipping the remaining tests in the current suite: Check ValidateIf logic
skipped Filepath: cypress/integration/new-api/check-validate-if-logic.spec.js
Title: Check ValidateIf logic load default data and clear field for disable error in field with ValidateIf logic
Error: null
skipped Filepath: cypress/integration/new-api/check-validate-if-logic.spec.js
Title: Check ValidateIf logic load default data and clear field with ValidateIf logic and set other value to input and save form
Error: null

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants