Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Has a fix available, CVSS 5.4
SNYK-JS-GOT-2932019
Why? Has a fix available, CVSS 7.4
SNYK-JS-HAWK-2808852
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-HOSTEDGITINFO-1088355
Why? Proof of Concept exploit, Has a fix available, CVSS 6.4
SNYK-JS-JSON5-3182856
Why? Has a fix available, CVSS 8.6
SNYK-JS-JSONSCHEMA-1920922
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-JSZIP-1251497
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-PATHPARSE-1077067
Why? Proof of Concept exploit, Has a fix available, CVSS 6
SNYK-JS-PATHVAL-596926
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-POSTCSS-1255640
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-PROMPTS-1729737
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: css-loader
The new version differs by 71 commits.See the full diff
Package name: gh-got
The new version differs by 21 commits.See the full diff
Package name: github-username
The new version differs by 9 commits.See the full diff
Package name: got
The new version differs by 250 commits.See the full diff
Package name: hawk
The new version differs by 101 commits.See the full diff
Package name: hosted-git-info
The new version differs by 55 commits.See the full diff
Package name: html-webpack-plugin
The new version differs by 139 commits.See the full diff
Package name: icss-utils
The new version differs by 16 commits.See the full diff
Package name: json-schema
The new version differs by 27 commits.See the full diff
Package name: json5
The new version differs by 91 commits.See the full diff
Package name: jsprim
The new version differs by 1 commits.See the full diff
Package name: loader-utils
The new version differs by 36 commits.See the full diff
Package name: pathval
The new version differs by 12 commits.See the full diff
Package name: postcss-loader
The new version differs by 30 commits.See the full diff
Package name: postcss-modules-extract-imports
The new version differs by 5 commits.See the full diff
Package name: postcss-modules-local-by-default
The new version differs by 2 commits.See the full diff
Package name: postcss-modules-scope
The new version differs by 5 commits.See the full diff
Package name: postcss-modules-values
The new version differs by 5 commits.See the full diff
Package name: prompts
The new version differs by 99 commits.