[Snyk] Security upgrade react-live from 1.12.0 to 2.2.3

[philipedin]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • examples/styleguide/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	539/1000 Why? Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	Yes	No Known Exploit
	520/1000 Why? Has a fix available, CVSS 5.9	Denial of Service SNYK-JS-NODEFETCH-674311	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-PRISMJS-1076581	Yes	Proof of Concept
	584/1000 Why? Has a fix available, CVSS 7.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-PRISMJS-1314893	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-PRISMJS-1585202	Yes	Proof of Concept
	629/1000 Why? Has a fix available, CVSS 8.3	Cross-site Scripting (XSS) SNYK-JS-PRISMJS-597628	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: react-live

The new version differs by 80 commits.

• 4ef3706 v2.2.3
• 2d8246b Merge pull request [Snyk] Security upgrade mongodb from 2.2.36 to 3.1.3 #225 from FormidableLabs/issue/221-update-create-react-context
• b17fe78 Remove create-react-context entirely
• 52eb2bb Update create-react-context to avoid node-fetch DoS vulnerability, fixes [Snyk] Security upgrade gatsby from 1.9.279 to 2.1.1 #221
• 00ca573 Merge pull request [Snyk] Security upgrade yargs from 8.0.2 to 13.1.0 #223 from FormidableLabs/jp-update-demo
• c3c4430 re-add next export command
• 678aea9 modernise demo site
• d01e04c Update README.md
• c4eee2c v2.2.2
• 6bc5776 Merge pull request [Snyk] Fix for 1 vulnerabilities #172 from ZhenHe17/fix/demo-start-scripts
• 616649a fix: demo start scripts
• 1b9342e Merge pull request [Snyk] Fix for 1 vulnerabilities #166 from adierkens/add-context-to-ts
• 1a3c537 Merge pull request [Snyk] Fix for 1 vulnerabilities #169 from endiliey/deps-upgrade
• 041794d chore: update 'prism-react-renderer' & 'unescape'
• de588f0 Add LiveContext typings
• e5a6122 v2.2.1
• b1ec35b Merge pull request [Snyk] Fix for 1 vulnerabilities #165 from devanshj/update-editor-dep
• 19ceaa4 Update `react-simple-code-editor`
• 501fa26 Merge pull request [Snyk] Fix for 1 vulnerabilities #161 from RobinCsl/patch-1
• 9ef29d9 Fix: Update demo link in README.md
• 9aa0e0f 2.2.0
• f2af1a7 Add missing demo dependencies
• 4615e93 Merge pull request [Snyk] Fix for 1 vulnerabilities #159 from FormidableLabs/fix/template-strings-docs
• d0fd7ad fix and issue with template strings, update docs and site

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service
🦉 Cross-site Scripting (XSS)