[Snyk] Fix for 1 vulnerabilities #38

dorielalon · 2024-08-30T10:25:31Z

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

frontend/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Cross-site Scripting (XSS) SNYK-JS-WEBPACK-7840298	157

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-WEBPACK-7840298

socket-security · 2024-08-30T10:26:19Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@angular-builders/[email protected]	eval Transitive: environment, filesystem, network	`+54`	67.1 MB	justjeb
npm/@angular-devkit/[email protected]	environment, filesystem, network, shell, unsafe Transitive: eval	`+282`	303 MB	google-wombot

View full report↗︎

apiiro · 2024-08-30T10:31:00Z

WORKFLOW-82 · Demo Bitbucket Cloud App PR

Frameworks, Dependencies and Idioms

Dependency declaration @angular-builders/custom-webpack: 16.0.1 (package.json:15) upgraded
Dependency declaration @angular-devkit/build-angular: 16.2.15 (package.json:16) upgraded
Dependency declaration micromatch: 4.0.8 (package.json)
- ℹ Introduced 0 vulnerabilities
Dependency declaration webpack: 5.94.0 (package.json)
- ℹ Introduced 0 vulnerabilities
New dependency declaration grunt-cli: 1.5.0 (package.json:247)
⚠ Dependency declaration socket.io-parser: 4.0.5 (package.json) that is containing high severity vulnerabilities

Repository: juice-shop
Applications: Haimon app

View in Apiiro

rafikmojr · 2024-08-30T10:33:44Z

Checkmarx One – Scan Summary & Details – 13c32188-bb1b-4765-bba8-cd9da2b1a901

New Issues

Issue	Source File / Package	Checkmarx Insight
CVE-2024-29415	Npm-ip-2.0.1	Vulnerable Package
CVE-2024-30105	Nuget-System.Text.Json-7.0.20	Vulnerable Package
CVE-2024-34394	Npm-libxmljs2-0.33.0	Vulnerable Package
CVE-2024-37890	Npm-ws-7.4.6	Vulnerable Package
CVE-2024-38355	Npm-socket.io-3.1.2	Vulnerable Package
Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 33	desc
Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 23	desc
Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 31	desc
Unpinned Actions Full Length Commit SHA	/synopsys-action.yml: 25	desc
Unpinned Actions Full Length Commit SHA	/ci.yml: 57	desc
CVE-2024-42459	Npm-elliptic-6.5.4	Vulnerable Package
CVE-2024-42460	Npm-elliptic-6.5.4	Vulnerable Package
CVE-2024-42461	Npm-elliptic-6.5.4	Vulnerable Package

Fixed Issues

Severity	Issue	Source File / Package
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 137
	Reflected_XSS	/test/cypress/e2e/contact.spec.ts: 187
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 143
	Reflected_XSS	/test/cypress/e2e/noSql.spec.ts: 82
	Path_Traversal	/Langchain/py_example.py: 99
	Log_Forging	/Langchain/py_example.py: 95
	Log_Forging	/Langchain/py_example.py: 99
	Log_Forging	/Langchain/py_example.py: 95
	Log_Forging	/Langchain/py_example.py: 99
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14
	Open_Redirect	/routes/redirect.ts: 14

fix: frontend/package.json to reduce vulnerabilities

66950d6

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-WEBPACK-7840298

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Fix for 1 vulnerabilities #38

[Snyk] Fix for 1 vulnerabilities #38

dorielalon commented Aug 30, 2024

socket-security bot commented Aug 30, 2024

apiiro bot commented Aug 30, 2024

rafikmojr commented Aug 30, 2024

[Snyk] Fix for 1 vulnerabilities #38

Are you sure you want to change the base?

[Snyk] Fix for 1 vulnerabilities #38

Conversation

dorielalon commented Aug 30, 2024

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

socket-security bot commented Aug 30, 2024

apiiro bot commented Aug 30, 2024

WORKFLOW-82 · Demo Bitbucket Cloud App PR

Frameworks, Dependencies and Idioms

rafikmojr commented Aug 30, 2024

New Issues

Fixed Issues