New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 10 vulnerabilities #28

Open

snyk-bot wants to merge 1 commit into master from snyk-fix-662a2454d25c5b391dcc712b29a325b1

snyk-bot commented Apr 4, 2022

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- packages/client-app/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-2404183	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Improper Check or Handling of Exceptional Conditions SNYK-JS-ELECTRON-2404184	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Integer Overflow or Wraparound SNYK-JS-ELECTRON-2420972	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-2420994	Yes	No Known Exploit
	456/1000 Why? Recently disclosed, Has a fix available, CVSS 3.4	Improper Access Control SNYK-JS-ELECTRON-2431353	Yes	No Known Exploit
	698/1000 Why? Currently trending on Twitter, Recently disclosed, Has a fix available, CVSS 7.3	Type Confusion SNYK-JS-ELECTRON-2434822	Yes	No Known Exploit
	626/1000 Why? Recently disclosed, Has a fix available, CVSS 6.8	Use After Free SNYK-JS-ELECTRON-2434824	Yes	No Known Exploit
	566/1000 Why? Recently disclosed, Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	Yes	No Known Exploit
	651/1000 Why? Recently disclosed, Has a fix available, CVSS 7.3	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	Yes	No Known Exploit
	566/1000 Why? Recently disclosed, Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: googleapis

The new version differs by 250 commits.

20409df chore: release 49.0.0 (Feature request: Pause inbox nylas/nylas-mail#2022)
7de4e78 chore(deps): update dependency null-loader to v4 (Google Sign In doesnt work for me nylas/nylas-mail#2044)
340f78d chore(deps): update dependency ts-loader to v7 (Ability to handle mailto links on Windows nylas/nylas-mail#2043)
254f878 chore: remove unused dev packages (Replying to accounts from the same user replies to wrong "to" address nylas/nylas-mail#2042)
f4eb6e0 chore: update lint ignore files (All accounts section won't update with new email nylas/nylas-mail#2040)
0110f3e docs: update readme for drive readme (Nylas Does Not Open nylas/nylas-mail#2039)
73d284b fix(deps): update common and auth (Feature request: auto snooze nylas/nylas-mail#2038)
476b71e test: use discovery docs from fixture (Surely an error. $7 a month for a client? nylas/nylas-mail#2037)
3a3b61d build: remove unused codecov config (Can't add a Gmail account - Google Sign In does not appear nylas/nylas-mail#2034)
fea414a feat!: regenerate the API (horizontal scrollbar does not appear when viewing wide email nylas/nylas-mail#2028)
48a4f05 chore(dep)!: deprecate node 8 (Documentation contains broken links nylas/nylas-mail#2021)
99ebacf test: the kitchen sink system test sometimes times out (Picking the wrong Sender address while replying nylas/nylas-mail#2020)
05090da fix: apache license URL (Unread counts for all accounts nylas/nylas-mail#468) (Use long names nylas/nylas-mail#2017)
d15c656 chore: remove duplicate mocha config (Parse Office 365 names nylas/nylas-mail#2016)
874edc3 build: update templates (N1 shows & now sends blank emails nylas/nylas-mail#2013)
dc16586 build: set AUTOSYNTH_MULTIPLE_COMMITS=true for context aware commits (Images not loaded in message nylas/nylas-mail#2012)
741c58b chore: update github actions configuration (*SUGGESTION* Default Windows 10 Theme nylas/nylas-mail#1999)
1fe744b chore(deps): update dependency @ types/rimraf to v3 (rank 👍 before 👎 nylas/nylas-mail#1995)
5512eb5 chore(deps): update dependency typedoc to ^0.17.0 (N1 only shows first email account when it is opened after reboot. nylas/nylas-mail#1993)
0a4db38 chore: release 48.0.0 ('sent' isn't capitalised nylas/nylas-mail#1979)
074f641 fix: allow an empty requestBody to be provided for APIs that support multipart post (Fix copy when archiving/deleting nylas/nylas-mail#1988)
8bcb212 feat!: run the generator (adds: displayvideo, gamesConfiguration, managedidentities, networkmanagement) (Signature turns out to be quote after a reply sent nylas/nylas-mail#1989)
8677588 build(tests): fix coveralls and enable build cop (Feature Request: Only show the folders for the currently selected mailbox nylas/nylas-mail#1982)
0679c78 build: update linkinator config (mailto links not opening compose window nylas/nylas-mail#1981)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.


          fix: packages/client-app/package.json to reduce vulnerabilities

47cc575

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2404183
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2404184
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2420972
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2420994
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2431353
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2434822
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2434824
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430337
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430339
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430341

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet