Skip to content

[Snyk] Security upgrade docsify from 4.11.5 to 4.12.0 - #133

Merged
sy-records merged 1 commit into
masterfrom
snyk-fix-4057f1d9a59780f5e6c763907ed8c5b7
Feb 21, 2021
Merged

[Snyk] Security upgrade docsify from 4.11.5 to 4.12.0#133
sy-records merged 1 commit into
masterfrom
snyk-fix-4057f1d9a59780f5e6c763907ed8c5b7

Conversation

@sy-records

Copy link
Copy Markdown
Member

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 823/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6
Cross-site Scripting (XSS)
SNYK-JS-DOCSIFY-1066017
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: docsify The new version differs by 128 commits.
  • a2132c8 chore: add changelog 4.12.0
  • ed4b5be [build] 4.12.0
  • 06cbebf fix: Use legacy-compatible methods for IE11 (#1495)
  • 759ffac fix: Unable to navigate on server without default index support (#1372)
  • 14ce7f3 fix: Prevent loading remote content via URL hash (#1489)
  • 8968a74 feat: search ignore diacritical marks (#1434)
  • c7f4c7c Fix font-size changing for code in headings (#1456)
  • 716a7fa fix: upgrade marked from 1.2.4 to 1.2.9 (#1486)
  • 5bd91b4 Merge pull request #1488 from docsifyjs/update-language-support
  • 2626036 Merge branch 'develop' into update-language-support
  • f1f8121 Merge pull request #1487 from docsifyjs/update-playwright-1.8
  • ac0d416 Merge branch 'update-language-support' of https://github.com/docsifyjs/docsify into update-language-support
  • 46bad40 Update test snapshot
  • 7cdf460 Restore pathNamespaces
  • 8f9f0e5 Prettier format updates (no changes)
  • 7297ee5 Add label translations (ru, es)
  • 9a73bd1 Remove write-a-plugin.md alias
  • cf5c743 Set html “lang” attribute based on URL hash
  • 743bb64 chore: update playwright to 1.8.0
  • eee9507 fix: upgrade dompurify from 2.2.2 to 2.2.6 (#1483)
  • 7adad57 fix: upgrade dompurify from 2.2.3 to 2.2.6 (#1482)
  • 5f29cde fix: upgrade prismjs from 1.22.0 to 1.23.0 (#1481)
  • 85c9c8f update(docs): update the cmd of python setup serve in py2 and py3. (#1473)
  • e04e268 chore(deps-dev): bump axios from 0.20.0 to 0.21.1 (#1471)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants