[Snyk] Upgrade: react, react-dom #6

karthik-js · 2023-08-25T04:05:45Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
react from 16.13.1 to 16.14.0	1 version ahead of your current version	3 years ago on 2020-10-14
react-dom from 16.13.1 to 16.14.0	1 version ahead of your current version	3 years ago on 2020-10-14

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Command Injection SNYK-JS-LODASH-1040724	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Prototype Pollution SNYK-JS-OBJECTPATH-1017036	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Prototype Pollution SNYK-JS-OBJECTPATH-1585658	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Arbitrary File Overwrite SNYK-JS-TAR-1536528	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Prototype Pollution SNYK-JS-OBJECTPATH-1569453	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Open Redirect SNYK-JS-NEXT-1540422	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Denial of Service SNYK-JS-NODEFETCH-674311	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react

16.14.0 - 2020-10-14
React
- Add support for the new JSX transform. (@ lunaruan in #18299)
16.13.1 - 2020-03-19
React DOM
- Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@ acdlite in #18238)
- Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@ gaearon in #18330)
Artifacts
- react: https://unpkg.com/react@16.13.1/umd/
- react-art: https://unpkg.com/react-art@16.13.1/umd/
- react-dom: https://unpkg.com/react-dom@16.13.1/umd/
- react-is: https://unpkg.com/react-is@16.13.1/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.1/umd/
- scheduler: https://unpkg.com/scheduler@0.19.1/umd/

from react GitHub release notes

Package name: react-dom

16.14.0 - 2020-10-14
React
- Add support for the new JSX transform. (@ lunaruan in #18299)
16.13.1 - 2020-03-19
React DOM
- Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@ acdlite in #18238)
- Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@ gaearon in #18330)
Artifacts
- react: https://unpkg.com/react@16.13.1/umd/
- react-art: https://unpkg.com/react-art@16.13.1/umd/
- react-dom: https://unpkg.com/react-dom@16.13.1/umd/
- react-is: https://unpkg.com/react-is@16.13.1/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.1/umd/
- scheduler: https://unpkg.com/scheduler@0.19.1/umd/

from react-dom GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - react from 16.13.1 to 16.14.0. See this package in npm: https://www.npmjs.com/package/react - react-dom from 16.13.1 to 16.14.0. See this package in npm: https://www.npmjs.com/package/react-dom See this project in Snyk: https://app.snyk.io/org/karthik-js/project/23423621-3a08-4506-845f-b6ca93304a47?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade: react, react-dom #6

[Snyk] Upgrade: react, react-dom #6

Uh oh!

karthik-js commented Aug 25, 2023

React

React DOM

Artifacts

React

React DOM

Artifacts

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

[Snyk] Upgrade: react, react-dom #6

Are you sure you want to change the base?

[Snyk] Upgrade: react, react-dom #6

Uh oh!

Conversation

karthik-js commented Aug 25, 2023

Snyk has created this PR to upgrade multiple dependencies.

React

React DOM

Artifacts

React

React DOM

Artifacts

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants