[Snyk] Upgrade react-scripts from 3.4.0 to 3.4.4 by Tereamarie · Pull Request #4 · Teresa-code-123/React-Router-Basic-Nav

Tereamarie · 2023-08-05T19:29:28Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-scripts from 3.4.0 to 3.4.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 4 versions ahead of your current version.
The recommended version was released 3 years ago, on 2020-10-20.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Improper Input Validation SNYK-JS-URLPARSE-2407770	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-Y18N-1021887	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-AJV-584908	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-OBJECTPATH-1017036	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-OBJECTPATH-1585658	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Arbitrary File Overwrite SNYK-JS-TAR-1536528	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-INI-1048974	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Remote Memory Exposure SNYK-JS-DNSPACKET-1293563	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Cryptographic Issues SNYK-JS-ELLIPTIC-571484	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Poisoning SNYK-JS-QS-3153490	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-NODEFORGE-598677	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Poisoning SNYK-JS-QS-3153490	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Arbitrary File Overwrite SNYK-JS-TAR-1536531	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TMPL-1583443	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WEBSOCKETEXTENSIONS-570623	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-MERGEDEEP-1070277	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Arbitrary Code Injection SNYK-JS-SERIALIZEJAVASCRIPT-570062	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Improper Input Validation SNYK-JS-URLPARSE-1078283	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Open Redirect SNYK-JS-URLPARSE-1533425	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Access Restriction Bypass SNYK-JS-URLPARSE-2401205	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Authorization Bypass SNYK-JS-URLPARSE-2407759	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-559764	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-YARGSPARSER-560381	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-YARGSPARSER-560381	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-OBJECTPATH-1569453	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Denial of Service (DoS) SNYK-JS-HTTPPROXY-569139	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1085627	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PROMPTS-1729737	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Information Exposure SNYK-JS-EVENTSOURCE-2823375	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1243891	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Command Injection SNYK-JS-NODENOTIFIER-1035794	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-559764	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Denial of Service (DoS) SNYK-JS-SOCKJS-575261	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-scripts

3.4.4 - 2020-10-20
3.4.3 - 2020-08-12
3.4.2 - 2020-08-11
3.4.1 - 2020-03-21
3.4.0 - 2020-02-14

from react-scripts GitHub release notes

Commit messages

Package name: react-scripts

d2f813f Publish
7641a3c Prepare 3.4.1 release
d5b527f Update to Babel 7.9 (#8681)
6adb82a Add React.StrictMode to default templates (#8558)
a452ddc Bump dependencies (#8620)
3f699fd Fix proxying API request docs (#8515)
4d26208 Use native ESLint behaviour when extending (#8276)
8ba0ccb Whitelist main in template.json (#8539)
7d3b72c Update template example in docs (#8561)
2030ee1 Fix optional chaining and nullish coalescing support (#8526)
038e6fa Widen eslint-config-react-app peer dependency versions (#7790)
7e6d6cd Closes webpack dev server and exits process on "end" stdin (#7203)
af926d5 Bump pnp-webpack-plugin (#8509)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-scripts from 3.4.0 to 3.4.4. See this package in npm: https://www.npmjs.com/package/react-scripts See this project in Snyk: https://app.snyk.io/org/tereamarie/project/49d5632e-f0cc-496e-a7aa-2fc13621711f?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade react-scripts from 3.4.0 to 3.4.4#4

[Snyk] Upgrade react-scripts from 3.4.0 to 3.4.4#4
Tereamarie wants to merge 1 commit into
masterfrom
snyk-upgrade-a493eaa58fe93283131d8626ba1de6db

Tereamarie commented Aug 5, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

Tereamarie commented Aug 5, 2023

Snyk has created this PR to upgrade react-scripts from 3.4.0 to 3.4.4.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants