Skip to content

Conversation

AdamMurray
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
critical severity 858/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 9.3
Authentication Bypass
SNYK-JS-HAWK-6969142
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: nwb The new version differs by 250 commits.
  • 72985a5 Release v0.19.1
  • 6fc5939 Add createClass and createReactClass to the list of factory function names React Transform will look for
  • a5de521 Update dependencies
  • cff7caf Run tests in Node 8 and prevent creation of a package-lock.json with npm 5
  • a313ba5 Update dependencies
  • 598f1f3 Merge pull request #393 from KevinBon/patch-1
  • 86e3b1e Update QuickDevelopment.md
  • 916a050 Update dependencies
  • 6e93166 Update dependencies
  • d61ff0e Revert changes to webpack.compat.enzyme from v0.19.0 and deprecate it
  • 6c92302 Update extract-text-webpack-plugin
  • 24926b6 Update style-loader and disable inclusion of its HMR code in builds
  • 516484b Tweak CHANGES.md
  • c04b2f4 Release v0.19.0
  • b56d36d Update dependencies
  • 19bd6ba Update dependencies
  • 47b9d74 Update dependencies
  • 5172ccd Added additional Enzyme compat config for recent versions of React 15
  • d0ff1de Update dependencies
  • 9a838a6 Update dependencies
  • ddbd30f Fix CLI help alignment
  • 67a873c Merge pull request #377 from jamrizzi/jamrizzi/cli-doc-error
  • 8842ad9 Update dependencies
  • c32f892 Use babel-preset-env instead of deprecated babel-preset-es201X plugins

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Authentication Bypass

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HAWK-6969142
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants