Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: , , , , #469

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

NOUIY
Copy link
Owner

@NOUIY NOUIY commented May 26, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@babel/types
from 7.1.3 to 7.24.5 | 109 versions ahead of your current version | a month ago
on 2024-04-29
@babel/generator
from 7.1.3 to 7.24.5 | 119 versions ahead of your current version | a month ago
on 2024-04-29
@babel/parser
from 7.1.3 to 7.24.5 | 165 versions ahead of your current version | a month ago
on 2024-04-29
@babel/template
from 7.1.2 to 7.24.0 | 32 versions ahead of your current version | 3 months ago
on 2024-02-28
@babel/traverse
from 7.1.4 to 7.24.5 | 121 versions ahead of your current version | a month ago
on 2024-04-29

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462
786 Proof of Concept
high severity Command Injection
SNYK-JS-LODASH-1040724
786 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-450202
786 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-567746
786 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-608086
786 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-6139239
786 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
786 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
786 Proof of Concept
Release notes
Package name: @babel/types
  • 7.24.5 - 2024-04-29

    v7.24.5 (2024-04-29)

    Thanks @ romgrk and @ sossost for your first PRs!

    🐛 Bug Fix

    • babel-plugin-transform-classes, babel-traverse
    • babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

    💅 Polish

    🏠 Internal

    • Other
    • babel-parser
    • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
    • babel-plugin-proposal-partial-application, babel-types
    • babel-plugin-transform-class-properties, babel-preset-env

    🏃‍♀️ Performance

    • babel-helpers, babel-preset-env, babel-runtime-corejs3
      • #16357 Performance: improve objectWithoutPropertiesLoose on V8 (@ romgrk)

    Committers: 6

  • 7.24.0 - 2024-02-28

    v7.24.0 (2024-02-28)

    Thanks @ ajihyf for your first PR!

    Release post with summary and highlights: https://babeljs.io/7.24.0

    🚀 New Feature

    • babel-standalone
      • #11696 Export babel tooling packages in @ babel/standalone (@ ajihyf)
    • babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
    • babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
    • babel-preset-flow
    • babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone
    • babel-plugin-transform-runtime
    • babel-parser, babel-types

    🐛 Bug Fix

    • babel-plugin-proposal-do-expressions, babel-traverse
    • babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object
    • babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods
    • babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env
    • babel-helpers
    • babel-helpers, babel-plugin-proposal-decorators

    💅 Polish

    • babel-core, babel-helper-create-class-features-plugin, babel-preset-env

    🏠 Internal

    • babel-helper-transform-fixture-test-runner

    🔬 Output optimization

    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
    • babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-private-methods
    • babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
    • babel-helper-create-class-features-plugin, babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
    • babel-helpers, babel-plugin-proposal-decorators

    Committers: 7

  • 7.23.9 - 2024-01-25
  • 7.23.6 - 2023-12-11
  • 7.23.5 - 2023-11-29
  • 7.23.4 - 2023-11-20
  • 7.23.3 - 2023-11-09
  • 7.23.0 - 2023-09-25
  • 7.22.19 - 2023-09-14
  • 7.22.17 - 2023-09-08
  • 7.22.15 - 2023-09-04
  • 7.22.11 - 2023-08-24
  • 7.22.10 - 2023-08-07
  • 7.22.5 - 2023-06-08
  • 7.22.4 - 2023-05-29
  • 7.22.3 - 2023-05-27
  • 7.22.0 - 2023-05-26
  • 7.21.5 - 2023-04-28
  • 7.21.4 - 2023-03-31
  • 7.21.4-esm.4 - 2023-04-04
  • 7.21.4-esm.3 - 2023-04-04
  • 7.21.4-esm.2 - 2023-04-04
  • 7.21.4-esm.1 - 2023-04-04
  • 7.21.4-esm - 2023-04-04
  • 7.21.3 - 2023-03-14
  • 7.21.2 - 2023-02-23
  • 7.21.0 - 2023-02-20
  • 7.20.7 - 2022-12-22
  • 7.20.5 - 2022-11-28
  • 7.20.2 - 2022-11-04
  • 7.20.0 - 2022-10-27
  • 7.19.4 - 2022-10-10
  • 7.19.3 - 2022-09-27
  • 7.19.0 - 2022-09-05
  • 7.18.13 - 2022-08-22
  • 7.18.10 - 2022-08-01
  • 7.18.9 - 2022-07-18
  • 7.18.8 - 2022-07-08
  • 7.18.7 - 2022-06-28
  • 7.18.6 - 2022-06-27
  • 7.18.4 - 2022-05-29
  • 7.18.2 - 2022-05-25
  • 7.18.0 - 2022-05-19
  • 7.17.12 - 2022-05-16
  • 7.17.10 - 2022-04-29
  • 7.17.0 - 2022-02-02
  • 7.16.8 - 2022-01-10
  • 7.16.7 - 2021-12-31
  • 7.16.0 - 2021-10-29
  • 7.15.6 - 2021-09-09
  • 7.15.4 - 2021-09-02
  • 7.15.0 - 2021-08-04
  • 7.14.9 - 2021-08-01
  • 7.14.8 - 2021-07-20
  • 7.14.5 - 2021-06-09
  • 7.14.4 - 2021-05-28
  • 7.14.2 - 2021-05-12
  • 7.14.1 - 2021-05-04
  • 7.14.0 - 2021-04-29
  • 7.13.17 - 2021-04-20
  • 7.13.16 - 2021-04-20
  • 7.13.14 - 2021-03-29
  • 7.13.13 - 2021-03-26
  • 7.13.12 - 2021-03-22
  • 7.13.0 - 2021-02-22
  • 7.12.17 - 2021-02-18
  • 7.12.13 - 2021-02-03
  • 7.12.12 - 2020-12-23
  • 7.12.11 - 2020-12-15
  • 7.12.10 - 2020-12-09
  • 7.12.7 - 2020-11-20
  • 7.12.6 - 2020-11-04
  • 7.12.5 - 2020-11-03
  • 7.12.1 - 2020-10-15
  • 7.12.0 - 2020-10-14
  • 7.11.5 - 2020-08-31
  • 7.11.0 - 2020-07-30
  • 7.10.5 - 2020-07-14
  • 7.10.4 - 2020-06-30
  • 7.10.3 - 2020-06-19
  • 7.10.2 - 2020-05-30
  • 7.10.1 - 2020-05-27
  • 7.10.0 - 2020-05-26
  • 7.9.6 - 2020-04-29
  • 7.9.5 - 2020-04-07
  • 7.9.0 - 2020-03-20
  • 7.8.7 - 2020-03-05
  • 7.8.6 - 2020-02-27
  • 7.8.3 - 2020-01-13
  • 7.8.0 - 2020-01-12
  • 7.7.4 - 2019-11-22
  • 7.7.2 - 2019-11-06
  • 7.7.1 - 2019-11-05
  • 7.7.0 - 2019-11-05
  • 7.6.3 - 2019-10-08
  • 7.6.1 - 2019-09-06
  • 7.6.0 - 2019-09-06
  • 7.5.5 - 2019-07-17
  • 7.5.0 - 2019-07-04
  • 7.4.4 - 2019-04-26
  • 7.4.0 - 2019-03-19
  • 7.3.4 - 2019-02-25
  • 7.3.3 - 2019-02-15
  • 7.3.2 - 2019-02-04
  • 7.3.0 - 2019-01-21
  • 7.2.2 - 2018-12-15
  • 7.2.0 - 2018-12-03
  • 7.1.6 - 2018-11-13
  • 7.1.5 - 2018-11-06
  • 7.1.3 - 2018-10-11
from @babel/types GitHub release notes
Package name: @babel/generator
  • 7.24.5 - 2024-04-29

    v7.24.5 (2024-04-29)

    Thanks @ romgrk and @ sossost for your first PRs!

    🐛 Bug Fix

    • babel-plugin-transform-classes, babel-traverse
    • babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

    💅 Polish

    🏠 Internal

    • Other
    • babel-parser
    • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
    • babel-plugin-proposal-partial-application, babel-types
    • babel-plugin-transform-class-properties, babel-preset-env

    🏃‍♀️ Performance

    • babel-helpers, babel-preset-env, babel-runtime-corejs3
      • #16357 Performance: improve objectWithoutPropertiesLoose on V8 (@ romgrk)

    Committers: 6

  • 7.24.4 - 2024-04-03

    v7.24.4 (2024-04-03)

    Thanks @ Dunqing, @ luiscubal, and @ samualtnorman for your first PRs!

    👓 Spec Compliance

    • babel-parser
    • babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

    🐛 Bug Fix

    • babel-generator
    • babel-compat-data, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-preset-env
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • babel-plugin-transform-block-scoping
    • babel-core, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping

    Committers: 7

  • 7.24.1 - 2024-03-19

    v7.24.1 (2024-03-19)

    🐛 Bug Fix

    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
    • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties

    📝 Documentation

    🏠 Internal

    • babel-code-frame, babel-highlight
    • babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
    • babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
    • Other

    🔬 Output optimization

    • babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
    • babel-plugin-transform-class-properties, babel-plugin-transform-classes
    • babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
    • babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env

    Committers: 4

  • 7.23.6 - 2023-12-11
  • 7.23.5 - 2023-11-29
  • 7.23.4 - 2023-11-20
  • 7.23.3 - 2023-11-09
  • 7.23.0 - 2023-09-25
  • 7.22.15 - 2023-09-04
  • 7.22.10 - 2023-08-07
  • 7.22.9 - 2023-07-12
  • 7.22.7 - 2023-07-06
  • 7.22.5 - 2023-06-08
  • 7.22.3 - 2023-05-27
  • 7.22.0 - 2023-05-26
  • 7.21.9 - 2023-05-22
  • 7.21.5 - 2023-04-28
  • 7.21.4 - 2023-03-31
  • 7.21.4-esm.4 - 2023-04-04
  • 7.21.4-esm.3 - 2023-04-04
  • 7.21.4-esm.2 - 2023-04-04
  • 7.21.4-esm.1 - 2023-04-04
  • 7.21.4-esm - 2023-04-04
  • 7.21.3 - 2023-03-14
  • 7.21.1 - 2023-02-20
  • 7.21.0 - 2023-02-20
  • 7.20.14 - 2023-01-27
  • 7.20.7 - 2022-12-22
  • 7.20.5 - 2022-11-28
  • 7.20.4 - 2022-11-08
  • 7.20.3 - 2022-11-07
  • 7.20.2 - 2022-11-04
  • 7.20.1 - 2022-11-01
  • 7.20.0 - 2022-10-27
  • 7.19.6 - 2022-10-20
  • 7.19.5 - 2022-10-10
  • 7.19.4 - 2022-10-10
  • 7.19.3 - 2022-09-27
  • 7.19.0 - 2022-09-05
  • 7.18.13 - 2022-08-22
  • 7.18.12 - 2022-08-05
  • 7.18.10 - 2022-08-01
  • 7.18.9 - 2022-07-18
  • 7.18.7 - 2022-06-28
  • 7.18.6 - 2022-06-27
  • 7.18.2 - 2022-05-25
  • 7.18.0 - 2022-05-19
  • 7.17.12 - 2022-05-16
  • 7.17.10 - 2022-04-29
  • 7.17.9 - 2022-04-06
  • 7.17.7 - 2022-03-14
  • 7.17.3 - 2022-02-15
  • 7.17.0 - 2022-02-02
  • 7.16.8 - 2022-01-10
  • 7.16.7 - 2021-12-31
  • 7.16.5 - 2021-12-13
  • 7.16.0 - 2021-10-29
  • 7.15.8 - 2021-10-06
  • 7.15.4 - 2021-09-02
  • 7.15.0 - 2021-08-04
  • 7.14.9 - 2021-08-01
  • 7.14.8 - 2021-07-20
  • 7.14.5 - 2021-06-09
  • 7.14.3 - 2021-05-17
  • 7.14.2 - 2021-05-12
  • 7.14.1 - 2021-05-04
  • 7.14.0 - 2021-04-29
  • 7.13.16 - 2021-04-20
  • 7.13.9 - 2021-03-01
  • 7.13.0 - 2021-02-22
  • 7.12.17 - 2021-02-18
  • 7.12.15 - 2021-02-04
  • 7.12.13 - 2021-02-03
  • 7.12.11 - 2020-12-15
  • 7.12.10 - 2020-12-09
  • 7.12.5 - 2020-11-03
  • 7.12.1 - 2020-10-15
  • 7.12.0 - 2020-10-14
  • 7.11.6 - 2020-09-03
  • 7.11.5 - 2020-08-31
  • 7.11.4 - 2020-08-20
  • 7.11.0 - 2020-07-30
  • 7.10.5 - 2020-07-14
  • 7.10.4 - 2020-06-30
  • 7.10.3 - 2020-06-19
  • 7.10.2 - 2020-05-30
  • 7.10.1 - 2020-05-27
  • 7.10.0 - 2020-05-26
  • 7.9.6 - 2020-04-29
  • 7.9.5 - 2020-04-07
  • 7.9.4 - 2020-03-24
  • 7.9.3 - 2020-03-22
  • 7.9.0 - 2020-03-20
  • 7.8.8 - 2020-03-12
  • 7.8.7 - 2020-03-05
  • 7.8.6 - 2020-02-27
  • 7.8.4 - 2020-01-30
  • 7.8.3 - 2020-01-13
  • 7.8.0 - 2020-01-12
  • 7.7.7 - 2019-12-19
  • 7.7.4 - 2019-11-22
  • 7.7.2 - 2019-11-06
  • 7.7.0 - 2019-11-05
  • 7.6.4 - 2019-10-10
  • 7.6.3 - 2019-10-08
  • 7.6.2 - 2019-09-23
  • 7.6.0 - 2019-09-06
  • 7.5.5 - 2019-07-17
  • 7.5.0 - 2019-07-04
  • 7.4.4 - 2019-04-26
  • 7.4.0 - 2019-03-19
  • 7.3.4 - 2019-02-25
  • 7.3.3 - 2019-02-15
  • 7.3.2 - 2019-02-04
  • 7.3.0 - 2019-01-21
  • 7.2.2 - 2018-12-15
  • 7.2.0 - 2018-12-03
  • 7.1.6 - 2018-11-13
  • 7.1.5 - 2018-11-06
  • 7.1.3 - 2018-10-11
from @babel/generator GitHub release notes
Package name: @babel/parser
  • 7.24.5 - 2024-04-29

    v7.24.5 (2024-04-29)

    Thanks @ romgrk and @ sossost for your first PRs!

    🐛 Bug Fix

    • babel-plugin-transform-classes, babel-traverse
    • babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

    💅 Polish

    🏠 Internal

    • Other
    • babel-parser
    • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
    • babel-plugin-proposal-partial-application, babel-types
    • babel-plugin-transform-class-properties, babel-preset-env

    🏃‍♀️ Performance

    • babel-helpers, babel-preset-env, babel-runtime-corejs3
      • #16357 Performance: improve objectWithoutPropertiesLoose on V8 (@ romgrk)

    Committers: 6

  • 7.24.4 - 2024-04-03

    v7.24.4 (2024-04-03)

    Thanks @ Dunqing, @ luiscubal, and @ samualtnorman for your first PRs!

    👓 Spec Compliance

    • babel-parser
    • babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

    🐛 Bug Fix

    • babel-generator
    • babel-compat-data, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-preset-env
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • babel-plugin-transform-block-scoping
    • babel-core, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping

Snyk has created this PR to upgrade:
  - @babel/types from 7.1.3 to 7.24.5.
    See this package in npm: https://www.npmjs.com/package/@babel/types
  - @babel/generator from 7.1.3 to 7.24.5.
    See this package in npm: https://www.npmjs.com/package/@babel/generator
  - @babel/parser from 7.1.3 to 7.24.5.
    See this package in npm: https://www.npmjs.com/package/@babel/parser
  - @babel/template from 7.1.2 to 7.24.0.
    See this package in npm: https://www.npmjs.com/package/@babel/template
  - @babel/traverse from 7.1.4 to 7.24.5.
    See this package in npm: https://www.npmjs.com/package/@babel/traverse

See this project in Snyk:
https://app.snyk.io/org/nexuscompute/project/029d293e-7561-494b-bc8e-c337cff423f6?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants