Skip to content

Conversation

parseplatformorg
Copy link
Contributor

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 531/1000
Why? Recently disclosed, Has a fix available, CVSS 4.9
Denial of Service (DoS)
SNYK-JS-PARSEPUSHADAPTER-5595563
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @parse/push-adapter The new version differs by 3 commits.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)

@parse-github-assistant
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title [Snyk] Security upgrade @parse/push-adapter from 4.1.2 to 4.1.3 refactor: Security upgrade @parse/push-adapter from 4.1.2 to 4.1.3 May 23, 2023
@parse-github-assistant
Copy link

Thanks for opening this pull request!

  • ❌ Please link an issue that describes the reason for this pull request, otherwise your pull request will be closed. Make sure to write it as Closes: #123 in the PR description, so I can recognize it.

@codecov
Copy link

codecov bot commented May 23, 2023

Codecov Report

Patch coverage has no change and project coverage change: -0.01 ⚠️

Comparison is base (d8bff57) 94.12% compared to head (9e63048) 94.11%.

❗ Current head 9e63048 differs from pull request most recent head 6b933f7. Consider uploading reports for the commit 6b933f7 to get more accurate results

Additional details and impacted files
@@                Coverage Diff                @@
##           release-5.x.x    #8571      +/-   ##
=================================================
- Coverage          94.12%   94.11%   -0.01%     
=================================================
  Files                183      183              
  Lines              13798    13798              
=================================================
- Hits               12987    12986       -1     
- Misses               811      812       +1     

see 1 file with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

@mtrezza mtrezza merged commit 8e83cac into release-5.x.x May 23, 2023
@mtrezza mtrezza deleted the snyk-fix-3c09d937c86c075eb08f9c022e885eaf branch May 23, 2023 23:40
parseplatformorg pushed a commit that referenced this pull request May 23, 2023
## [5.5.1](5.5.0...5.5.1) (2023-05-23)

### Bug Fixes

* Security upgrade @parse/push-adapter from 4.1.2 to 4.1.3 ([#8571](#8571)) ([8e83cac](8e83cac))
@parseplatformorg
Copy link
Contributor Author

🎉 This change has been released in version 5.5.1

@parseplatformorg parseplatformorg added the state:released-5.x.x Released as LTS version label May 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
state:released-5.x.x Released as LTS version
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants