Skip to content

[Snyk] Security upgrade favicons-webpack-plugin from 0.0.7 to 3.0.0#77

Open
j1348 wants to merge 1 commit into
masterfrom
snyk-fix-44494ef982757ba371c9f3e0dc87c0f1
Open

[Snyk] Security upgrade favicons-webpack-plugin from 0.0.7 to 3.0.0#77
j1348 wants to merge 1 commit into
masterfrom
snyk-fix-44494ef982757ba371c9f3e0dc87c0f1

Conversation

@j1348

@j1348 j1348 commented Mar 22, 2024

Copy link
Copy Markdown
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 718/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5
Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: favicons-webpack-plugin The new version differs by 211 commits.
  • 61ffe97 chore(release): 3.0.0
  • 15bab27 fix: remove "force" inject option
  • 395fc09 feat: add support for html-webpack-plugin v4
  • c6aceb3 chore(release): 2.1.0
  • a083def feat: add typescript typings
  • e73679f test: improve test summary
  • 2319163 test: format html for better diffing
  • 17425e9 docs: update examples to show how to use relative logo files
  • 22c7f6d chore(release): 2.0.0
  • b3a5eb3 feat: allow setting public path to an empty string
  • 7c86a6c chore: upgrade to new favicons version
  • b48697f fix: remove unused contentHash
  • 7aad73d test: use snapshot tests instead of manual comparison
  • a3f75b1 chore(release): 1.0.2
  • c54c965 fix: fix output path of dev favicon
  • ff1eae8 docs: fix typo in readme.md
  • 5a6558e Fix typo
  • 7e64271 chore(release): 1.0.1
  • a3a3471 test: update snapshots for version 1.0.1
  • 4f091d5 test: drop light prefixed tests
  • ac3ea09 chore: add package-lock.json
  • 67a8850 fix: fix hash generation for light-mode
  • 3fe5163 chore: add commitizen
  • 4cb4981 Merge pull request #157 from jantimon/feature/merge-back

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Resource Consumption ('Resource Exhaustion')

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants