This repository has been archived by the owner on Dec 20, 2023. It is now read-only.

Update dependency react-dom to v16.2.1 (master) #2

Open

appcues-wss wants to merge 1 commit into master from whitesource-remediate/master-react-dom-16.x-lockfile

appcues-wss bot commented Feb 18, 2023 •

edited

Loading

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
react-dom (source)	`16.2.0` -> `16.2.1`

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	CVE
Medium	6.1	CVE-2018-6341

Release Notes

facebook/react (react-dom)

`v16.2.1`

React DOM Server

Fix a potential XSS vulnerability when the attacker controls an attribute name (CVE-2018-6341). This fix is available in the latest [email protected], as well as in previous affected minor versions: [email protected], [email protected], [email protected], and [email protected]. (@gaearon in #13302)

If you want to rebase/retry this PR, check this box


          Update dependency react-dom to v16.2.1

42d66f8

appcues-wss bot added the security fix label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels