Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Security upgrade @trezor/connect-web from 9.1.4 to 9.4.3 #11

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Security upgrade @trezor/connect-web from 9.1.4 to 9.4.3 #11

wants to merge 1 commit into from

Conversation

jircs
Copy link
Owner

@jircs jircs commented Nov 25, 2024

snyk-top-banner

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864		   751  
medium severity Server-Side Request Forgery (SSRF)
SNYK-JS-IP-7148531		   646  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)

@socket-security Socket Security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/[email protected] None 0 33.2 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 543 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 4.05 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 441 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 54.7 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 63.7 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 161 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 6.67 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 12 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 43.3 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 14.1 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 6 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 31.8 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 48.3 kB nicolo-ribaudo
npm/@babel/[email protected] None 0 11.8 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 1.9 MB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 4.14 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 7.04 kB nicolo-ribaudo
npm/@babel/[email protected] None 0 42.5 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 135 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 23.6 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/[email protected] None 0 248 kB nicolo-ribaudo
npm/@babel/[email protected] None 0 70.3 kB nicolo-ribaudo
npm/@babel/[email protected] None 0 672 kB nicolo-ribaudo
npm/@babel/[email protected] environment 0 2.55 MB nicolo-ribaudo
npm/@emurgo/[email protected] eval 0 3.35 MB lisicky_emurgo
npm/@emurgo/[email protected] eval, filesystem 0 3.35 MB lisicky_emurgo
npm/@ethereumjs/[email protected] None 0 134 kB holgerd77
npm/@fivebinaries/[email protected] None 0 149 kB slowbackspace
npm/@jridgewell/[email protected] None 0 81.6 kB jridgewell
npm/@jridgewell/[email protected] None 0 17.9 kB jridgewell
npm/@jridgewell/[email protected] None 0 177 kB jridgewell
npm/@jridgewell/[email protected] None 0 169 kB jridgewell
npm/@kleros/address-tags-sdk@git+ssh://[email protected]/MyEtherWallet/address-tags-sdk.git#88a61282e2a1a5fea8a28e07ba058b26b93ae0b1 None 0 0 B
npm/@ledgerhq/compressjs@git+ssh://[email protected]/LedgerHQ/compressjs.git#d9e8e4d994923e0ea76a32b97289bcccfe71b82e None 0 0 B
npm/@leichtgewicht/[email protected] None 0 17.7 kB leichtgewicht
npm/@mobily/[email protected] None 0 381 kB mobily
npm/@scure/[email protected] None 0 133 kB paulmillr
npm/@swc/[email protected] None 0 234 kB kdy1
npm/@trezor/[email protected] network 0 14.2 kB trezor-ci
npm/@trezor/[email protected] None 0 58.4 kB trezor-ci
npm/@trezor/[email protected] network 0 58.8 kB trezor-ci
npm/@trezor/[email protected] None 0 217 kB trezor-ci
npm/@trezor/[email protected] environment 0 5.41 kB trezor-ci
npm/@trezor/[email protected] None 0 201 kB trezor-ci
npm/@trezor/[email protected] None 0 90.4 kB trezor-ci
npm/@trezor/[email protected] filesystem 0 1.46 MB trezor-ci
npm/@trezor/[email protected] environment 0 17.7 kB trezor-ci
npm/@trezor/[email protected] None 0 1.01 MB trezor-ci
npm/@trezor/[email protected] None 0 12 kB trezor-ci
npm/@trezor/[email protected] None 0 39.4 kB trezor-ci
npm/@trezor/[email protected] network 0 172 kB trezor-ci
npm/@trezor/[email protected] None 0 3.2 kB trezor-ci
npm/@trezor/[email protected] None 0 69 kB trezor-ci
npm/@trezor/[email protected] None 0 237 kB trezor-ci
npm/@types/[email protected] None 0 13.3 kB types
npm/@types/[email protected] None 0 6.67 kB types
npm/@types/[email protected] None 0 8.92 kB types
npm/@types/[email protected] None 0 2.76 MB types
npm/[email protected] None 0 64.4 kB matteo.collina
npm/bls12377js@git+ssh://[email protected]/celo-org/bls12377js.git#cb38a4cfb643c778619d79b20ca3e5283a2122a6 None 0 0 B

🚮 Removed packages: npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@jridgewell/[email protected], npm/@jridgewell/[email protected], npm/@jridgewell/[email protected], npm/@kleros/address-tags-sdk@github:MyEtherWallet/address-tags-sdk#88a61282e2a1a5fea8a28e07ba058b26b93ae0b1, npm/@ledgerhq/compressjs@github:LedgerHQ/compressjs#d9e8e4d994923e0ea76a32b97289bcccfe71b82e, npm/@scure/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@trezor/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/bls12377js@git+https://github.com/celo-org/bls12377js.git#cb38a4cfb643c778619d79b20ca3e5283a2122a6, npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@jircs @snyk-bot