From 187ac73945fa99eb19422fdb98a0b60327ef3cc6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 2 Mar 2024 16:28:42 +0000 Subject: [PATCH 1/2] fix: upgrade fs from 0.0.1-security to 0.0.2 Snyk has created this PR to upgrade fs from 0.0.1-security to 0.0.2. See this package in npm: https://www.npmjs.com/package/fs See this project in Snyk: https://app.snyk.io/org/karimsultan/project/2d622fe5-2121-4dad-853b-eec89cf4e38f?utm_source=github&utm_medium=referral&page=upgrade-pr --- semgrep/package-lock.json | 14 +++++++------- semgrep/package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/semgrep/package-lock.json b/semgrep/package-lock.json index f17e255..c9c0c21 100644 --- a/semgrep/package-lock.json +++ b/semgrep/package-lock.json @@ -10,7 +10,7 @@ "license": "ISC", "dependencies": { "@typescript-eslint/parser": "^4.31.1", - "fs": "0.0.1-security", + "fs": "^0.0.2", "safe-regex": "^2.1.1" } }, @@ -828,9 +828,9 @@ "peer": true }, "node_modules/fs": { - "version": "0.0.1-security", - "resolved": "https://registry.npmjs.org/fs/-/fs-0.0.1-security.tgz", - "integrity": "sha1-invTcYa23d84E/I4WLV+yq9eQdQ=" + "version": "0.0.2", + "resolved": "https://registry.npmjs.org/fs/-/fs-0.0.2.tgz", + "integrity": "sha512-YAiVokMCrSIFZiroB1oz51hPiPRVcUtSa4x2U5RYXyhS9VAPdiFigKbPTnOSq7XY8wd3FIVPYmXpo5lMzFmxgg==" }, "node_modules/fs.realpath": { "version": "1.0.0", @@ -2229,9 +2229,9 @@ "peer": true }, "fs": { - "version": "0.0.1-security", - "resolved": "https://registry.npmjs.org/fs/-/fs-0.0.1-security.tgz", - "integrity": "sha1-invTcYa23d84E/I4WLV+yq9eQdQ=" + "version": "0.0.2", + "resolved": "https://registry.npmjs.org/fs/-/fs-0.0.2.tgz", + "integrity": "sha512-YAiVokMCrSIFZiroB1oz51hPiPRVcUtSa4x2U5RYXyhS9VAPdiFigKbPTnOSq7XY8wd3FIVPYmXpo5lMzFmxgg==" }, "fs.realpath": { "version": "1.0.0", diff --git a/semgrep/package.json b/semgrep/package.json index 9d6a4ca..3e2c501 100644 --- a/semgrep/package.json +++ b/semgrep/package.json @@ -11,7 +11,7 @@ "license": "ISC", "dependencies": { "@typescript-eslint/parser": "^4.31.1", - "fs": "0.0.1-security", + "fs": "0.0.2", "safe-regex": "^2.1.1" } } From 103970e88c704fdce02064d6d339c75c5a00a44e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 22 Mar 2024 18:17:08 +0000 Subject: [PATCH 2/2] fix: tool for manual verification/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555 --- tool for manual verification/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tool for manual verification/package.json b/tool for manual verification/package.json index a55485d..88c689e 100644 --- a/tool for manual verification/package.json +++ b/tool for manual verification/package.json @@ -10,7 +10,7 @@ "react": "^17.0.2", "react-diff-viewer": "^3.1.1", "react-dom": "^17.0.2", - "react-scripts": "4.0.3", + "react-scripts": "5.0.0", "string-similarity": "^4.0.4", "web-vitals": "^1.1.2" },