Skip to content

[Snyk] Upgrade bower from 1.2.8 to 1.8.14 #31

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
chisun-joung wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade bower from 1.2.8 to 1.8.14 #31

chisun-joung wants to merge 1 commit into from

Conversation

@chisun-joung
Copy link
Contributor

@chisun-joung chisun-joung commented Dec 14, 2022

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade bower from 1.2.8 to 1.8.14.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 51 versions ahead of your current version.
  • The recommended version was released 9 months ago, on 2022-03-14.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
npm:deep-extend:20180409		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Improper minification of non-boolean comparisons
npm:uglify-js:20150824		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Symlink File Overwrite
npm:tar:20151103		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-174125		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Arbitrary File Write
SNYK-JS-TAR-1579155		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579152		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579147		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536531		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536528		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Override Protection Bypass
npm:qs:20170213		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Denial of Service (DoS)
npm:qs:20140806		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Poisoning
SNYK-JS-QS-3153490		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Arbitrary Command Injection
npm:open:20180512		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-MOUT-2342654		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-MOUT-1014544		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-MOUT-2342654		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-MOUT-1014544		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-MOUT-2342654		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-MOUT-1014544		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:minimatch:20160620		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-1019388		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-LODASH-73638		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-608086		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-567746		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-450202		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Command Injection
SNYK-JS-LODASH-1040724		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HAWK-2808852		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Arbitrary Code Execution
SNYK-JS-HANDLEBARS-534478		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-HANDLEBARS-469063		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-HANDLEBARS-173692		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Remote Code Execution (RCE)
SNYK-JS-HANDLEBARS-1056767		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Arbitrary File Overwrite
SNYK-JS-FSTREAM-174725		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Arbitrary File Write via Archive Extraction (Zip Slip)
SNYK-JS-BOWER-73627		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Uninitialized Memory Exposure
npm:tunnel-agent:20170305		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
npm:semver:20150403		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:semver:20150403		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Remote Memory Exposure
npm:request:20160119		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Timing Attack
npm:http-signature:20150122		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
npm:hoek:20180212		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
npm:uglify-js:20151024		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Denial of Service (DoS)
npm:qs:20140806-1		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-559764		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
npm:lodash:20180130		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-73639		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Cross-site Scripting (XSS)
npm:handlebars:20151207		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-HANDLEBARS-567742		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-HANDLEBARS-1279029		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
npm:mime:20170907		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Arbitrary Code Injection
SNYK-JS-OPEN-174041		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
npm:hawk:20160119		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-HANDLEBARS-534988		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Arbitrary File Write via Archive Extraction (Zip Slip)
SNYK-JS-DECOMPRESSZIP-73598		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@chisun-joung @snyk-bot