Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade codeceptjs from 3.0.2 to 3.0.5 #564

Merged
merged 1 commit into from
Feb 5, 2021

Conversation

m0nhawk
Copy link
Contributor

@m0nhawk m0nhawk commented Feb 5, 2021

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 616/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Server-Side Request Forgery (SSRF)
SNYK-JS-AXIOS-1038255
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: codeceptjs The new version differs by 81 commits.
  • 737e4cf Merge branch 'master' of github.com:codeceptjs/CodeceptJS into 3.x
  • 53e1cf1 Merge branch '3.x' of github.com:codeceptjs/CodeceptJS into 3.x
  • 3d8fa87 updated changelog
  • 05fe637 fixed cli reporter (#2800)
  • 03be1a5 Changelog for 3.0.5 (#2795)
  • 3afbeea feat: propagate more events for custom parallel script (#2796)
  • f505c83 #2797 +CustomLocators interface (#2798)
  • fb3421f Update Dockerfile to support CodeceptJS 3.x. (#2742)
  • 2d0f7cb Merge pull request #2745 from ktryniszewski-mdsol/fix_gherkin
  • 4e64c7d doc: unclosed code block in page objects markdown file (#2793)
  • 3b0e277 Merge pull request #2756 from danielrentz/issue2755
  • 47ef1e1 Merge pull request #2747 from elaichenkov/3.x
  • d6126ba Merge pull request #2675 from Shard/shard/fix-screenshot-config
  • ca8d6b3 Merge pull request #2750 from elaichenkov/feature/add-aibility-to-run-ts-config
  • 42fcda7 Merge pull request #2748 from elaichenkov/fix/#2740-locator-in-console
  • 68f2a6b Merge pull request #2766 from codeceptjs/fix/apiDataFactory_test
  • 56fc0ec Added fixes to unit tests to prove the issue
  • 81f7072 Merge pull request #2743 from stedman/fix-interactive-shell
  • 30a7956 feat: mask the payload with sensitive info in console logs (#2786)
  • 4825f53 Update conf for Browserstack (#2768)
  • b23e60a fix: allure report for multi sessions (#2771)
  • 54f9d33 fix(typings): value of the fillField method for all helpers (#2769)
  • cc618b7 Update polly (#2760)
  • 32cf753 fix(playwright): #2422 - fix grabCssPropertyFromAll method (#2757)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

@m0nhawk m0nhawk requested a review from themarcelor February 5, 2021 05:16
Copy link
Contributor

@themarcelor themarcelor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

@themarcelor themarcelor merged commit f8abbcb into master Feb 5, 2021
@themarcelor themarcelor deleted the snyk-fix-0af2c037d2b2a05422676a7a50e0578d branch February 5, 2021 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants