From c81dc92e93c0df492bd955d693dffa29dd14c15c Mon Sep 17 00:00:00 2001
From: admin-token-bot <36773031+admin-token-bot@users.noreply.github.com>
Date: Mon, 13 Feb 2023 15:22:25 +0000
Subject: [PATCH] [Snyk] Upgrade @types/react from 17.0.39 to 17.0.52 (#2553)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Snyk has created this PR to upgrade @types/react from 17.0.39 to
17.0.52.
:information_source: Keep your dependencies up-to-date. This makes it
easier to fix existing vulnerabilities and to more quickly identify and
fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **13 versions** ahead of your current
version.
- The recommended version was released **3 months ago**, on 2022-10-27.
The recommended version fixes:
Severity | Issue | PriorityScore (*) | Exploit Maturity |
:-------------------------:|:-------------------------|-------------------------|:-------------------------
| Prototype
Pollution
[SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105)
| **375/1000**
**Why?** CVSS 7.5 | No Known Exploit
| Prototype
Pollution
[SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105)
| **375/1000**
**Why?** CVSS 7.5 | No Known Exploit
| Remote Code Execution
(RCE)
[SNYK-JS-EJS-2803307](https://snyk.io/vuln/SNYK-JS-EJS-2803307) |
**375/1000**
**Why?** CVSS 7.5 | Proof of Concept
| Denial of Service
(DoS)
[SNYK-JS-DECODEURICOMPONENT-3149970](https://snyk.io/vuln/SNYK-JS-DECODEURICOMPONENT-3149970)
| **375/1000**
**Why?** CVSS 7.5 | Proof of Concept
| Prototype
Pollution
[SNYK-JS-ASYNC-2441827](https://snyk.io/vuln/SNYK-JS-ASYNC-2441827) |
**375/1000**
**Why?** CVSS 7.5 | Proof of Concept
| Regular Expression
Denial of Service (ReDoS)
[SNYK-JS-TERSER-2806366](https://snyk.io/vuln/SNYK-JS-TERSER-2806366) |
**375/1000**
**Why?** CVSS 7.5 | No Known Exploit
| Denial of Service
(DoS)
[SNYK-JS-NWSAPI-2841516](https://snyk.io/vuln/SNYK-JS-NWSAPI-2841516) |
**375/1000**
**Why?** CVSS 7.5 | No Known Exploit
| Regular Expression
Denial of Service (ReDoS)
[SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943)
| **375/1000**
**Why?** CVSS 7.5 | No Known Exploit
| Regular Expression
Denial of Service (ReDoS)
[SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992)
| **375/1000**
**Why?** CVSS 7.5 | No Known Exploit
| Regular Expression
Denial of Service (ReDoS)
[SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943)
| **375/1000**
**Why?** CVSS 7.5 | No Known Exploit
| Regular Expression
Denial of Service (ReDoS)
[SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992)
| **375/1000**
**Why?** CVSS 7.5 | No Known Exploit
| Prototype
Pollution
[SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) |
**375/1000**
**Why?** CVSS 7.5 | Proof of Concept
| Prototype
Pollution
[SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) |
**375/1000**
**Why?** CVSS 7.5 | Proof of Concept
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: @types/react
-
17.0.52 - 2022-10-27
-
17.0.51 - 2022-10-25
-
17.0.50 - 2022-09-13
-
17.0.49 - 2022-08-30
-
17.0.48 - 2022-07-27
-
17.0.47 - 2022-06-16
-
17.0.46 - 2022-06-16
-
17.0.45 - 2022-05-06
-
17.0.44 - 2022-04-07
-
17.0.43 - 2022-03-24
-
17.0.42 - 2022-03-23
-
17.0.41 - 2022-03-19
-
17.0.40 - 2022-03-10
-
17.0.39 - 2022-02-03
from @types/react
GitHub release notes
**Note:** *You are seeing this because you or someone else with access
to this repository has authorized Snyk to open upgrade PRs.*
For more information:
🧐 [View latest project
report](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR
settings](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade
PRs](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?pkg=@types/react&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
Co-authored-by: snyk-bot
---
examples/web/package.json | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/examples/web/package.json b/examples/web/package.json
index b223fad98e..1280562a37 100644
--- a/examples/web/package.json
+++ b/examples/web/package.json
@@ -9,7 +9,7 @@
"@testing-library/user-event": "^13.5.0",
"@types/jest": "^27.4.0",
"@types/node": "^16.11.62",
- "@types/react": "^17.0.39",
+ "@types/react": "^17.0.52",
"@types/react-dom": "^17.0.11",
"firebase": "^9.10.0",
"graphql": "^16.3.0",