[Snyk] Upgrade eslint-config-react-app from 7.0.0 to 7.0.1 #7

snyk-bot · 2022-10-22T17:46:43Z

Snyk has created this PR to upgrade eslint-config-react-app from 7.0.0 to 7.0.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 1 version ahead of your current version.
The recommended version was released 6 months ago, on 2022-04-12.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	375/1000 Why? CVSS 7.5	No Known Exploit
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	375/1000 Why? CVSS 7.5	No Known Exploit
Authorization Bypass Through User-Controlled Key SNYK-JS-PARSEPATH-2936439	375/1000 Why? CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-OBJECTPATH-1585658	375/1000 Why? CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	375/1000 Why? CVSS 7.5	Proof of Concept
Directory Traversal SNYK-JS-MOMENT-2440688	375/1000 Why? CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-JPEGJS-2859218	375/1000 Why? CVSS 7.5	Proof of Concept
Deserialization of Untrusted Data SNYK-JS-GATSBYPLUGINMDX-2405699	375/1000 Why? CVSS 7.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	375/1000 Why? CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	375/1000 Why? CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-DICER-2311764	375/1000 Why? CVSS 7.5	Mature
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIHTML-1296849	375/1000 Why? CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	375/1000 Why? CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	375/1000 Why? CVSS 7.5	No Known Exploit
Remote Code Execution (RCE) SNYK-JS-SHARP-2848109	375/1000 Why? CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PROMPTS-1729737	375/1000 Why? CVSS 7.5	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-PRISMJS-2404333	375/1000 Why? CVSS 7.5	No Known Exploit
Improper Input Validation SNYK-JS-PARSEURL-3024398	375/1000 Why? CVSS 7.5	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-PARSEURL-3023021	375/1000 Why? CVSS 7.5	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-PARSEURL-2942134	375/1000 Why? CVSS 7.5	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-PARSEURL-2936249	375/1000 Why? CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-PARSEURL-2935947	375/1000 Why? CVSS 7.5	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-PARSEURL-2935944	375/1000 Why? CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-OBJECTPATH-1569453	375/1000 Why? CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-NODEFETCH-2342118	375/1000 Why? CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-IMMER-1540542	375/1000 Why? CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-DEVCERT-2808183	375/1000 Why? CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	375/1000 Why? CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	375/1000 Why? CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	375/1000 Why? CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: eslint-config-react-app

7.0.1 - 2022-04-12
[email protected]
7.0.0 - 2021-12-14

from eslint-config-react-app GitHub release notes

Commit messages

Package name: eslint-config-react-app

19fa58d Publish
6fb4f97 Prepare 5.0.1 release
9802941 fix: webpack noise printed only if error or warning (#12245)
2eef1d0 Update templates to use React 18 `createRoot` (#12220)
213b6a2 chore: upgrade rtl version to support react 18 (#12223)
67b4868 docs: update Algolia credentials (#12151)
efc3581 Update lockfile
52d6431 Warn when not using the latest version of create-react-app but do not exit (#11915)
fd8c5f7 docs: add homepage banner in support of Ukraine (#12113)
428ddb6 Ignore docs when publishing (#11985)
a422bf2 Ensure posix compliant joins for urls in middleware (#11640)
63ae6dd updated deprecated rules (#11622)
255822f Fix a typo in deployment.md (#11594)
d73c2f2 docs: Changelog 5.0.0 (#11805)
b2f9ee3 prevent both npm and yarn commands from being copied (#11757)
0c72a32 Add docusaurus to workspaces, update lockfile
9673858 Update CONTRIBUTING.md