Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 2 vulnerabilities #36

Closed

Conversation

yaswanth-deriv
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • packages/core/package.json
    • packages/core/.snyk

Vulnerabilities that will be fixed

With a Snyk patch:
Severity Priority Score (*) Issue Exploit Maturity
low severity 506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
Proof of Concept
low severity 399/1000
Why? Has a fix available, CVSS 3.7
Regular Expression Denial of Service (ReDoS)
npm:ms:20170412
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

@coveralls
Copy link

Pull Request Test Coverage Report for Build 6242985139

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage increased (+0.001%) to 10.382%

Totals Coverage Status
Change from base Build 6232720059: 0.001%
Covered Lines: 10940
Relevant Lines: 90108

💛 - Coveralls

yaswanth-deriv pushed a commit that referenced this pull request Nov 6, 2023
* feat: add key files from prev tech tebt branch

* feat: add digits file from prev branch

* feat: add contract types file from prev branch

* feat: add trade params mobile from prev branch

* fix: remove duplicates

* Maryia/dtra-401/TS migration: multiplier components (#34)

* chore: migrate cancel-deal to ts

* chore: migrate expiration & expiration modal

* chore: migrated multiplier

* chore: migrate stop-loss

* chore: migrate take-profit

* chore: migrate widgets

* build: trigger build with empty commit

* Kate / DTRA-398 / TS migration: Widget components in Trader package (#33)

* refactor: ts of contract replay widget

* refactor: ts of mobile widgets

* refactor: ts of chart widgets

* refactor: ts of top widgets

* refactor: ts of top widgets

* refactor: types for widgets

* refactor: apply suggestions

* refactor: add position prop

* fix: extention of the imported file

* chore: replace some localizes (#36)

* Kate / DTRA-400 / [Refactoring]: delete duplicated unused files from Markers folder in Trader package and migrate to TS marker.jsx (#37)

* refactor: marker folder

* fix: change file extension in test

* Kate / DTRA-404 / [Refactoring]: Divide trade-categories.tsx file and cover changes with tests (#35)

* refactor: add rise fall description

* refactor: separate stay end high contract description

* refactor: separate description of digits contracts

* refactor: separate asian reset runhighlow touch contracts

* refactor: separate callputspread lb tickhighlow and vanilla contracts

* refactor: separate multipliers contract

* refactor: add unit tests for contract descriptions

* refactor: add more tests

* refactor: add tests for touch ans vanilla contracts

* refactor: tests for trade categories

* refactor: contract description structure

* refactor: apply suggestions

* refactor: add missing test case

* Maryia/DTRA-403/feat: migrate Routes files in Trader package to TS (#38)

* feat: migrate routes files to ts

* fix: routes extension

* refactor: for consistency

* refactor: import order

* refactor: renamed prop types

* refactor: type for consistency

* refactor: remove index as key

* fix: ts migrate settingsmodal and remove unused file (#39)

* fix: ts migrate settingsmodal and remove unused file

* fix: failing tests

* Kate/ fix: code smells (#40)

* fix: code smells

* chore: empty commit

* fix: function arguments

* refactor: tests

* fix: codesmells

* refactor: code smells

* chore: change optional chaining

* refactor: tests

* refactor: tests for widgets component

* fix: tests

* fix: conflicts

* fix: more conflicts

* fix: tests

* refactor: add more test cases

* fix: types in tests

* fix: test extention

* fix: return turbos back to types

* fix: revert unplanned files

* fix: code smells (#42)

* fix: test extention

* fix: bug with inserting objecting into the backticks

* fix: file extention after ts migration

* chore: sort imports

* chore: revert file

* chore: revert wallet changes

* chore: remove extra file

* chore: apply nit

* fix: language switching issue with the chart

---------

Co-authored-by: Maryia <103177211+maryia-deriv@users.noreply.github.com>
Co-authored-by: henry-deriv <118344354+henry-deriv@users.noreply.github.com>
Copy link

This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions github-actions bot added the Stale label Nov 20, 2023
Copy link

This PR was closed because it has been stalled for 5 days with no activity. Please reopen it if needed.

@github-actions github-actions bot closed this Nov 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants