Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade next from 13.4.7 to 13.4.10 #1521

Open
wants to merge 1 commit into
base: canary
Choose a base branch
from

Conversation

NOUIY
Copy link
Owner

@NOUIY NOUIY commented Aug 9, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade next from 13.4.7 to 13.4.10.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 32 versions ahead of your current version.
  • The recommended version was released a month ago, on 2023-07-14.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Remote Code Execution (RCE)
SNYK-JS-SHELLQUOTE-1766506
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Prototype Pollution
SNYK-JS-UNSETVALUE-2400660
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Prototype Pollution
SNYK-JS-LOADERUTILS-3043105
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Prototype Pollution
SNYK-JS-LOADERUTILS-3043105
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-BROWSERSLIST-1090194
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-NEXT-1577139
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
User Interface (UI) Misrepresentation of Critical Information
SNYK-JS-NEXT-2405694
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Information Exposure
SNYK-JS-NODEFETCH-2342118
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Denial of Service
SNYK-JS-NODEFETCH-674311
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Information Exposure
SNYK-JS-NODEFETCH-2342118
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Remote Code Execution (RCE)
SNYK-JS-SHARP-2848109
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TERSER-2806366
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Open Redirect
SNYK-JS-NEXT-1540422
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: next
  • 13.4.10 - 2023-07-14
    Read more
  • 13.4.10-canary.8 - 2023-07-14

    Core Changes

    • Catch layout error in global-error: #52654
    • Fix per-entry client reference manifest for grouped and named segments: #52664

    Credits

    Huge thanks to @ huozhi and @ shuding for helping!

  • 13.4.10-canary.7 - 2023-07-13

    Core Changes

    • Turbopack: OutputAsset trait: #52606
    • chore(deps): bump react@18.3.0-canary-9377e1010-20230712: #52649
    • Ensure root layout only render once per request: #52589
    • Fix bundle path normalization for /index routes: #52650
    • Turobpack: Next.rs API (part 1): #52259
    • Clean up promises after resolving: #52656

    Credits

    Huge thanks to @ sokra, @ styfle, @ huozhi, and @ shuding for helping!

  • 13.4.10-canary.6 - 2023-07-13

    Core Changes

    • Move App Pages rendering into bundle: #52290
    • feat(turbopack): support native webp: #52285
    • Set sizes prop to any for svg icons: #52609

    Documentation Changes

    • docs: fix typo in CSS Modules Description: #52599
    • docs: Fix typo in generate-static-params.mdx: #52595
    • docs: move MUI to supported list: #52584
    • docs: Add missing closing tag for react hydration error message.: #52607

    Misc Changes

    • Remove unnecessary body-parser: #52580

    Credits

    Huge thanks to @ Ryan-Dia, @ Terro216, @ wyattjoh, @ kwonoj, @ balazsorban44, @ anthonyshew, @ suhaotian, and @ huozhi for helping!

  • 13.4.10-canary.5 - 2023-07-12

    Core Changes

    • fix(next/jest): jest can not load server-only code: #52393
    • Turbopack: App Router build POC: #52036
    • Avoid loading Next.js config again in render workers: #52587
    • Add more extensions to next-types-plugin for Node16/NodeNext: #52562
    • feat(next-swc): report native bindings load err code: #52570

    Documentation Changes

    • Fixed grammar in 03-react-essentials.mdx: #52597

    Example Changes

    • Update examples: counter.tsx - Don't need empty space: #52576

    Credits

    Huge thanks to @ feugy, @ alexkirsz, @ shuding, @ karlhorky, @ starunaway, @ FernandVEYRIER, and @ kwonoj for helping!

  • 13.4.10-canary.4 - 2023-07-12

    Core Changes

    • Turbopack: Source trait: #52511
    • Update id handling for fonts: #52559
    • feat(turbopack): support swc transform plugins : #50401
    • feat(babel-loader): provide migration help message for babel config: #52565
    • Support global-error for ssr fallback: #52573
    • Fix ISR case with bot requests: #52581

    Documentation Changes

    • chore(docs): fix a few typos in image loader docs: #52508
    • docs: fix grammar on Server Actions: #52556

    Misc Changes

    • fix: not-found.tsx with output: export: #52526
    • use npm pack instead of yarn pack: #52563
    • ci: skip build-native for docs only change: #52571

    Credits

    Huge thanks to @ styfle, @ sokra, @ ijjk, @ djreillo, @ kwonoj, @ gnoff, and @ huozhi for helping!

  • 13.4.10-canary.3 - 2023-07-10
    Read more
  • 13.4.10-canary.2 - 2023-07-10
    Read more
  • 13.4.10-canary.1 - 2023-07-10
    Read more
  • 13.4.10-canary.0 - 2023-07-07
    Read more
  • 13.4.9 - 2023-07-06
  • 13.4.9-canary.3 - 2023-07-06
  • 13.4.9-canary.2 - 2023-07-05
  • 13.4.9-canary.1 - 2023-07-04
  • 13.4.9-canary.0 - 2023-07-04
  • 13.4.8 - 2023-07-03
  • 13.4.8-canary.15 - 2023-07-03
  • 13.4.8-canary.14 - 2023-06-30
  • 13.4.8-canary.13 - 2023-06-30
  • 13.4.8-canary.12 - 2023-06-29
  • 13.4.8-canary.11 - 2023-06-29
  • 13.4.8-canary.10 - 2023-06-29
  • 13.4.8-canary.9 - 2023-06-29
  • 13.4.8-canary.8 - 2023-06-28
  • 13.4.8-canary.7 - 2023-06-27
  • 13.4.8-canary.6 - 2023-06-27
  • 13.4.8-canary.5 - 2023-06-26
  • 13.4.8-canary.4 - 2023-06-26
  • 13.4.8-canary.3 - 2023-06-26
  • 13.4.8-canary.2 - 2023-06-24
  • 13.4.8-canary.1 - 2023-06-22
  • 13.4.8-canary.0 - 2023-06-22
  • 13.4.7 - 2023-06-21
from next GitHub release notes
Commit messages
Package name: next

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants