Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restyle [Snyk] Security upgrade simple-git from 2.46.0 to 3.3.0 #327

Open
wants to merge 1 commit into
base: snyk-fix-92bfec6699cb150f13f1f809f93a53fa
Choose a base branch
from

Conversation

restyled-io[bot]
Copy link

@restyled-io restyled-io bot commented Jun 20, 2022

Automated style fixes for #326, created by Restyled.

The following restylers made fixes:

To incorporate these changes, merge this Pull Request into the original. We
recommend using the Squash or Rebase strategies.

NOTE: As work continues on the original Pull Request, this process will
re-run and update (force-push) this Pull Request with updated style fixes as
necessary. If the style is fixed manually at any point (i.e. this process finds
no fixes to make), this Pull Request will be closed automatically.

Sorry if this was unexpected. To disable it, see our documentation.

@guardrails
Copy link

guardrails bot commented Jun 20, 2022

⚠️ We detected 28 security issues in this pull request:

Mode: paranoid | Total findings: 28 | Considered vulnerability: 28

Vulnerable Libraries (28)
Severity Details
Medium nanoid@3.1.25 (t) - no patch available
Medium markdown-it@10.0.0 (t) - no patch available
Critical set-value@2.0.1 (t) - no patch available
High lodash.template@4.5.0 (t) - no patch available
High yargs-parser@5.0.0 (t) - no patch available
High copy-props@2.0.4 (t) - no patch available
High glob-parent@3.1.0 (t) - no patch available
High marked@0.8.2 (t) - no patch available
High flat@5.0.2 (t) - no patch available
High taffydb@2.6.2 (t) - no patch available
Medium sanitize-html@1.27.0 (t) - no patch available
Critical unset-value@1.0.0 (t) - no patch available
High simple-git@3.3.0 (t) - no patch available
High underscore@1.10.2 (t) - no patch available
Medium nwsapi@2.2.0 (t) - no patch available
High moment@2.27.0 (t) - no patch available
High minimatch@3.0.4 (t) - no patch available
High copy-props@2.0.4 (t) upgrade to: >=2.0.5
High gulp@4.0.2 (t) upgrade to: >=3.9.1
Medium gulp-jsdoc3@3.0.0 (t) - no patch available
High jsdoc@3.6.4 (t) upgrade to: >3.6.7
Medium mkdirp@0.5.1 (t) upgrade to: >0.5.1
Medium mocha@9.1.2 (t) upgrade to: >9.1.4
High moment@2.27.0 (t) upgrade to: >=2.29.2
High simple-git@3.3.0 (t) upgrade to: >=3.5.0
High tar@4.4.13 (t) upgrade to: >4.4.17
High vinyl-fs@3.0.3 (t) upgrade to: >=2.4.2
Medium yargs-parser@5.0.0 (t) upgrade to: >5.0.0

More info on how to fix Vulnerable Libraries in General and JavaScript.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant