[Snyk] Fix for 2 vulnerabilities #74

PDSSnyk · 2024-06-17T19:55:35Z

This PR was automatically created by Snyk using the credentials of a real user.

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

frontend/package.json
frontend/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Denial of Service (DoS) SNYK-JS-WS-7266574	768
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	696

Release notes

Package name: @angular-devkit/build-angular

13.0.0 - 2021-11-03
13.0.0-rc.3 - 2021-11-02
13.0.0-rc.2 - 2021-10-27
13.0.0-rc.1 - 2021-10-21
13.0.0-rc.0 - 2021-10-14
13.0.0-next.9 - 2021-10-07
13.0.0-next.8 - 2021-10-05
13.0.0-next.7 - 2021-09-30
13.0.0-next.6 - 2021-09-22
13.0.0-next.5 - 2021-09-15
13.0.0-next.4 - 2021-09-08
13.0.0-next.3 - 2021-09-01
13.0.0-next.2 - 2021-08-26
13.0.0-next.1 - 2021-08-18
13.0.0-next.0 - 2021-08-11
12.2.18 - 2022-07-21
12.2.17 - 2022-03-31
12.2.16 - 2022-01-31
12.2.15 - 2022-01-12
12.2.14 - 2021-12-07
12.2.13 - 2021-11-03
12.2.12 - 2021-10-27
12.2.11 - 2021-10-20
12.2.10 - 2021-10-13
12.2.9 - 2021-10-07
12.2.8 - 2021-10-01
12.2.7 - 2021-09-23
12.2.6 - 2021-09-15
12.2.5 - 2021-09-08
12.2.4 - 2021-09-01
12.2.3 - 2021-08-26
12.2.2 - 2021-08-18
12.2.1 - 2021-08-11
12.2.0 - 2021-08-04
12.2.0-rc.0 - 2021-07-28
12.2.0-next.3 - 2021-07-21
12.2.0-next.2 - 2021-07-14
12.2.0-next.0 - 2021-06-25
12.1.4 - 2021-07-28
12.1.3 - 2021-07-21
12.1.2 - 2021-07-14
12.1.1 - 2021-07-01
12.1.0 - 2021-06-25
12.1.0-next.6 - 2021-06-17
12.1.0-next.5 - 2021-06-10
12.1.0-next.4 - 2021-06-02
12.1.0-next.3 - 2021-05-26
12.1.0-next.2 - 2021-05-19
12.0.5 - 2021-06-17
12.0.4 - 2021-06-10
12.0.3 - 2021-06-02
12.0.2 - 2021-05-26
12.0.1 - 2021-05-19
12.0.0 - 2021-05-12
12.0.0-rc.3 - 2021-05-11
12.0.0-rc.2 - 2021-05-06
12.0.0-rc.1 - 2021-04-28
12.0.0-rc.0 - 2021-04-21
12.0.0-next.9 - 2021-04-14
0.1200.0-next.8 - 2021-04-07
0.1200.0-next.7 - 2021-04-02
0.1200.0-next.6 - 2021-03-24
0.1200.0-next.5 - 2021-03-18
0.1200.0-next.4 - 2021-03-10
0.1200.0-next.3 - 2021-03-03
0.1200.0-next.2 - 2021-02-24
0.1200.0-next.1 - 2021-02-17
0.1200.0-next.0 - 2021-02-11
0.1102.19 - 2022-03-31
0.1102.18 - 2022-01-13
0.1102.17 - 2021-12-16
0.1102.16 - 2021-12-15
0.1102.15 - 2021-10-27
0.1102.14 - 2021-06-03
0.1102.13 - 2021-05-12
0.1102.12 - 2021-05-06
0.1102.11 - 2021-04-28
0.1102.10 - 2021-04-21
0.1102.9 - 2021-04-14
0.1102.8 - 2021-04-07
0.1102.7 - 2021-04-02
0.1102.6 - 2021-03-24
0.1102.5 - 2021-03-17
0.1102.4 - 2021-03-10
0.1102.3 - 2021-03-03
0.1102.2 - 2021-02-24
0.1102.1 - 2021-02-17
0.1102.0 - 2021-02-11
0.1102.0-rc.1 - 2021-02-05
0.1102.0-rc.0 - 2021-02-05
0.1102.0-next.0 - 2021-01-28
0.1101.4 - 2021-02-05
0.1101.3 - 2021-02-05
0.1101.2 - 2021-01-28
0.1101.1 - 2021-01-22
0.1101.0 - 2021-01-20
0.1101.0-rc.0 - 2021-01-14
0.1101.0-next.4 - 2021-01-06
0.1101.0-next.3 - 2020-12-17
0.1101.0-next.2 - 2020-12-09
0.1101.0-next.1 - 2020-12-03
0.1101.0-next.0 - 2020-11-18
0.1100.7 - 2021-01-14
0.1100.6 - 2021-01-06
0.1100.5 - 2020-12-17
0.1100.4 - 2020-12-09
0.1100.3 - 2020-12-02
0.1100.2 - 2020-11-18
0.1100.1 - 2020-11-12
0.1100.0 - 2020-11-11
0.1100.0-rc.3 - 2020-11-10
0.1100.0-rc.2 - 2020-11-05
0.1100.0-rc.1 - 2020-10-28
0.1100.0-rc.0 - 2020-10-22
0.1100.0-next.7 - 2020-10-15
0.1100.0-next.6 - 2020-10-08
0.1100.0-next.5 - 2020-10-08
0.1100.0-next.4 - 2020-10-01
0.1100.0-next.3 - 2020-09-23
0.1100.0-next.2 - 2020-09-17
0.1100.0-next.1 - 2020-09-10
0.1100.0-next.0 - 2020-09-02
0.1002.4 - 2021-12-16
0.1002.3 - 2021-02-25
0.1002.2 - 2021-02-05
0.1002.1 - 2020-12-17
0.1002.0 - 2020-10-22
0.1001.7 - 2020-10-15
0.1001.6 - 2020-10-08
0.1001.5 - 2020-10-08
0.1001.4 - 2020-10-01
0.1001.3 - 2020-09-23
0.1001.2 - 2020-09-17
0.1001.1 - 2020-09-10
0.1001.0 - 2020-09-02
0.1001.0-rc.0 - 2020-08-26
0.1001.0-next.7 - 2020-08-25
0.1001.0-next.6 - 2020-08-21
0.1001.0-next.5 - 2020-08-13
0.1001.0-next.4 - 2020-08-06
0.1001.0-next.3 - 2020-07-31
0.1001.0-next.2 - 2020-07-22
0.1001.0-next.1 - 2020-07-15
0.1001.0-next.0 - 2020-07-09
0.1000.8 - 2020-08-26

from @angular-devkit/build-angular GitHub release notes

Package name: @angular/cli

14.2.12 - 2023-06-28
14.2.11 - 2023-03-16
14.2.10 - 2022-11-17
14.2.9 - 2022-11-09
14.2.8 - 2022-11-02
14.2.7 - 2022-10-26
14.2.6 - 2022-10-12
14.2.5 - 2022-10-05
14.2.4 - 2022-09-28
14.2.3 - 2022-09-15
14.2.2 - 2022-09-08
14.2.1 - 2022-08-26
14.2.0 - 2022-08-25
14.2.0-rc.0 - 2022-08-17
14.2.0-next.2 - 2022-08-17
14.2.0-next.1 - 2022-08-11
14.2.0-next.0 - 2022-08-03
14.1.3 - 2022-08-17
14.1.2 - 2022-08-10
14.1.1 - 2022-08-03
14.1.0 - 2022-07-20
14.1.0-rc.3 - 2022-07-14
14.1.0-rc.2 - 2022-07-14
14.1.0-rc.1 - 2022-07-14
14.1.0-rc.0 - 2022-07-14
14.1.0-next.4 - 2022-07-06
14.1.0-next.3 - 2022-06-29
14.1.0-next.2 - 2022-06-23
14.1.0-next.1 - 2022-06-15
14.1.0-next.0 - 2022-06-09
14.0.7 - 2022-07-20
14.0.6 - 2022-07-13
14.0.5 - 2022-07-06
14.0.4 - 2022-06-29
14.0.3 - 2022-06-23
14.0.2 - 2022-06-15
14.0.1 - 2022-06-08
14.0.0 - 2022-06-02
14.0.0-rc.3 - 2022-05-31
14.0.0-rc.2 - 2022-05-25
14.0.0-rc.1 - 2022-05-18
14.0.0-rc.0 - 2022-05-11
14.0.0-next.13 - 2022-05-04
14.0.0-next.12 - 2022-04-27
14.0.0-next.11 - 2022-04-21
14.0.0-next.10 - 2022-04-21
14.0.0-next.9 - 2022-04-13
14.0.0-next.8 - 2022-04-06
14.0.0-next.7 - 2022-03-30
14.0.0-next.6 - 2022-03-16
14.0.0-next.5 - 2022-03-09
14.0.0-next.4 - 2022-03-03
14.0.0-next.3 - 2022-02-23
14.0.0-next.2 - 2022-02-18
14.0.0-next.1 - 2022-02-09
14.0.0-next.0 - 2022-02-02
13.3.11 - 2023-03-16
13.3.10 - 2022-11-17
13.3.9 - 2022-07-20
13.3.8 - 2022-06-15
13.3.7 - 2022-05-25
13.3.6 - 2022-05-18
13.3.5 - 2022-05-04
13.3.4 - 2022-04-27
13.3.3 - 2022-04-13
13.3.2 - 2022-04-06
13.3.1 - 2022-03-30
13.3.0 - 2022-03-16
13.2.6 - 2022-03-09
13.2.5 - 2022-02-23
13.2.4 - 2022-02-17
13.2.3 - 2022-02-09
13.2.2 - 2022-02-02
13.2.1 - 2022-01-31
13.2.0 - 2022-01-26
13.2.0-rc.1 - 2022-01-25
13.2.0-rc.0 - 2022-01-19
13.2.0-next.2 - 2022-01-12
13.2.0-next.1 - 2021-12-15
13.2.0-next.0 - 2021-12-09
13.1.4 - 2022-01-19
13.1.3 - 2022-01-12
13.1.2 - 2021-12-15
13.1.1 - 2021-12-10
13.1.0 - 2021-12-09
13.1.0-rc.0 - 2021-12-09
13.1.0-next.3 - 2021-12-02
13.1.0-next.2 - 2021-11-18
13.1.0-next.1 - 2021-11-11
13.1.0-next.0 - 2021-11-03
13.0.4 - 2021-12-01
13.0.3 - 2021-11-18
13.0.2 - 2021-11-11
13.0.1 - 2021-11-04
13.0.0 - 2021-11-03
13.0.0-rc.3 - 2021-11-02
13.0.0-rc.2 - 2021-10-27
13.0.0-rc.1 - 2021-10-21
13.0.0-rc.0 - 2021-10-14
13.0.0-next.9 - 2021-10-07
13.0.0-next.8 - 2021-10-05
13.0.0-next.7 - 2021-09-30
13.0.0-next.6 - 2021-09-22
13.0.0-next.5 - 2021-09-15
13.0.0-next.4 - 2021-09-08
13.0.0-next.3 - 2021-09-01
13.0.0-next.2 - 2021-08-26
13.0.0-next.1 - 2021-08-18
13.0.0-next.0 - 2021-08-11
12.2.18 - 2022-07-21
12.2.17 - 2022-03-31
12.2.16 - 2022-01-31
12.2.15 - 2022-01-12
12.2.14 - 2021-12-07
12.2.13 - 2021-11-03
12.2.12 - 2021-10-27
12.2.11 - 2021-10-20
12.2.10 - 2021-10-13
12.2.9 - 2021-10-07
12.2.8 - 2021-10-01
12.2.7 - 2021-09-23
12.2.6 - 2021-09-15
12.2.5 - 2021-09-08
12.2.4 - 2021-09-01
12.2.3 - 2021-08-26
12.2.2 - 2021-08-18
12.2.1 - 2021-08-11
12.2.0 - 2021-08-04
12.2.0-rc.0 - 2021-07-28
12.2.0-next.3 - 2021-07-21
12.2.0-next.2 - 2021-07-14
12.2.0-next.0 - 2021-06-25
12.1.4 - 2021-07-28
12.1.3 - 2021-07-21
12.1.2 - 2021-07-14
12.1.1 - 2021-07-01
12.1.0 - 2021-06-25
12.1.0-next.6 - 2021-06-17
12.1.0-next.5 - 2021-06-10
12.1.0-next.4 - 2021-06-02
12.1.0-next.3 - 2021-05-26
12.1.0-next.2 - 2021-05-19
12.0.5 - 2021-06-17
12.0.4 - 2021-06-10
12.0.3 - 2021-06-02
12.0.2 - 2021-05-26
12.0.1 - 2021-05-19
12.0.0 - 2021-05-12
12.0.0-rc.3 - 2021-05-11
12.0.0-rc.2 - 2021-05-06
12.0.0-rc.1 - 2021-04-28
12.0.0-rc.0 - 2021-04-21
12.0.0-next.9 - 2021-04-14
12.0.0-next.8 - 2021-04-07
12.0.0-next.7 - 2021-04-02
12.0.0-next.6 - 2021-03-24
12.0.0-next.5 - 2021-03-18
12.0.0-next.4 - 2021-03-10
12.0.0-next.3 - 2021-03-03
12.0.0-next.2 - 2021-02-24
12.0.0-next.1 - 2021-02-17
12.0.0-next.0 - 2021-02-11
11.2.19 - 2022-03-31
11.2.18 - 2022-01-13
11.2.17 - 2021-12-16
11.2.16 - 2021-12-15
11.2.15 - 2021-10-27
11.2.14 - 2021-06-03
11.2.13 - 2021-05-12
11.2.12 - 2021-05-06
11.2.11 - 2021-04-28
11.2.10 - 2021-04-21
11.2.9 - 2021-04-14
11.2.8 - 2021-04-07
11.2.7 - 2021-04-02
11.2.6 - 2021-03-24
11.2.5 - 2021-03-17
11.2.4 - 2021-03-10
11.2.3 - 2021-03-03
11.2.2 - 2021-02-24
11.2.1 - 2021-02-17
11.2.0 - 2021-02-11
11.2.0-rc.1 - 2021-02-05
11.2.0-rc.0 - 2021-02-05
11.2.0-next.0 - 2021-01-28
11.1.4 - 2021-02-05
11.1.3 - 2021-02-05
11.1.2 - 2021-01-28
11.1.1 - 2021-01-22
11.1.0 - 2021-01-20
11.1.0-rc.0 - 2021-01-14
11.1.0-next.4 - 2021-01-06
11.1.0-next.3 - 2020-12-17
11.1.0-next.2 - 2020-12-09
11.1.0-next.1 - 2020-12-03
11.1.0-next.0 - 2020-11-18
11.0.7 - 2021-01-14
11.0.6 - 2021-01-06
11.0.5 - 2020-12-17
11.0.4 - 2020-12-09
11.0.3 - 2020-12-02
11.0.2 - 2020-11-18
11.0.1 - 2020-11-12
11.0.0 - 2020-11-11
11.0.0-rc.3 - 2020-11-10
11.0.0-rc.2 - 2020-11-05
11.0.0-rc.1 - 2020-10-28
11.0.0-rc.0 - 2020-10-22
11.0.0-next.7 - 2020-10-15
11.0.0-next.6 - 2020-10-08
11.0.0-next.5 - 2020-10-08
11.0.0-next.4 - 2020-10-01
11.0.0-next.3 - 2020-09-23
11.0.0-next.2 - 2020-09-17
11.0.0-next.1 - 2020-09-10
11.0.0-next.0 - 2020-09-02
10.2.4 - 2021-12-16

from @angular/cli GitHub release notes

Package name: karma

6.0.0 - 2021-01-13
6.0.0 (2021-01-13)

Bug Fixes
- ci: abandon browserstack tests for Safari and IE (#3615) (04a811d)
- client: do not reset karmaNavigating in unload handler (#3591) (4a8178f), closes #3482
- context: do not error when karma is navigating (#3565) (05dc288), closes #3560
- cve: update ua-parser-js to 0.7.23 to fix CVE-2020-7793 (#3584) (f819fa8)
- cve: update yargs to 16.1.1 to fix cve-2020-7774 in y18n (#3578) (3fed0bc), closes #3577
- deps: bump socket-io to v3 (#3586) (1b9e1de), closes #3569
- middleware: catch errors when loading a module (#3605) (fec972f), closes #3572
- server: clean up close-server logic (#3607) (3fca456)
- test: clear up clearContext (#3597) (8997b74)
- test: mark all second connections reconnects (#3598) (1c9c2de)
Features
- cli: error out on unexpected options or parameters (#3589) (603bbc0)
- client: update banner with connection, test status, ping times (#3611) (4bf90f7)
- server: print stack of unhandledrejections (#3593) (35a5842)
- server: remove deprecated static methods (#3595) (1a65bf1)
- remove support for running dart code in the browser (#3592) (7a3bd55)
BREAKING CHANGES
- server: Deprecated require('karma').server.start() and require('karma').Server.start() variants were removed from the public API. Instead use canonical form:
```
const { Server } = require('karma');
const server = new Server();
server.start();
```
- cli: Karma is more strict and will error out if unknown option or argument is passed to CLI.
- Using Karma to run Dart code in the browser is no longer supported. Use your favorite Dart-to-JS compiler instead.
dart file type has been removed without a replacement.

customFileHandlers DI token has been removed. Use middleware to achieve similar functionality.

customScriptTypes DI token has been removed. It had no effect, so no replacement is provided.
- deps: Some projects have socket.io tests that are version sensitive.
5.2.3 - 2020-09-25
5.2.3 (2020-09-25)

Bug Fixes
- update us-parser-js dependency (#3564) (500ed25)
5.2.2 - 2020-09-08
5.2.2 (2020-09-08)

Bug Fixes
- revert source-map update (#3559) (d9ba284), closes #3557
5.2.1 - 2020-09-02
5.2.1 (2020-09-02)

Bug Fixes
- remove broken link from docs - 06-angularjs.md (#3555) (da2f307)
- remove unused JSON utilities and flatted dependency (#3550) (beed255)
5.2.0 - 2020-08-31
5.2.0 (2020-08-31)

Bug Fixes
- client: avoid race between execute and clearContext (#3452) (8bc5b46), closes #3424
- client: check in bundled client code into version control (#3524) (6cd5a3b), closes /github.com/karma-runner/karma/commit/f5521df7df5cd1201b5dce28dc4e326b1ffc41fd#commitcomment-38967493
- dependencies: update dependencies (#3543) (5db46b7)
- docs: Update 03-how-it-works.md (#3539) (e7cf7b1)
- server: log error when file loading or preprocessing fails (#3540) (fc2fd61)
Features
- server: allow 'exit' listeners to set exit code (#3541) (7a94d33)
5.1.1 - 2020-07-28
5.1.1 (2020-07-28)

Bug Fixes
- server: echo the hostname rather than listenAddress (#3532) (ebe7ce4)

from karma GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

…nerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-WS-7266574 - https://snyk.io/vuln/SNYK-JS-SEMVER-3247795

fix: frontend/package.json & frontend/package-lock.json to reduce vul…

0a90ee7

…nerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-WS-7266574 - https://snyk.io/vuln/SNYK-JS-SEMVER-3247795

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Fix for 2 vulnerabilities #74

[Snyk] Fix for 2 vulnerabilities #74

PDSSnyk commented Jun 17, 2024

6.0.0 (2021-01-13)

Bug Fixes

Features

BREAKING CHANGES

5.2.3 (2020-09-25)

Bug Fixes

5.2.2 (2020-09-08)

Bug Fixes

5.2.1 (2020-09-02)

Bug Fixes

5.2.0 (2020-08-31)

Bug Fixes

Features

5.1.1 (2020-07-28)

Bug Fixes

[Snyk] Fix for 2 vulnerabilities #74

Are you sure you want to change the base?

[Snyk] Fix for 2 vulnerabilities #74

Conversation

PDSSnyk commented Jun 17, 2024

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

6.0.0 (2021-01-13)

Bug Fixes

Features

BREAKING CHANGES

5.2.3 (2020-09-25)

Bug Fixes

5.2.2 (2020-09-08)

Bug Fixes

5.2.1 (2020-09-02)

Bug Fixes

5.2.0 (2020-08-31)

Bug Fixes

Features

5.1.1 (2020-07-28)

Bug Fixes