Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade @nuxt/content from 2.12.0 to 2.13.3 #256

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

themodernpk
Copy link
Collaborator

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JS-WS-7266574
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @nuxt/content The new version differs by 127 commits.
  • b0b5eb2 fix: draft field order
  • d6d10db fix: respect `draft` key as `_draft` (#2738)
  • aecd2e6 chore(deps): lock file maintenance (#2721)
  • 664ac08 chore: upgrade `@ nuxtjs/mdc`
  • 32f3ef0 chore(deps): update nuxt framework (#2734)
  • 179408e chore(deps): update all non-major dependencies (#2797)
  • 13e4a6d chore(deps): update devdependency jiti to v2 (#2796)
  • c1d6ad1 docs: update link to downloads count badge
  • 7c06a0b chore(deps): update all non-major dependencies (#2790)
  • 34f6517 fix: import `defineNitroPlugin` from `#imports`
  • c769bf8 chore(deps): update all non-major dependencies (#2785)
  • 27f1a5b chore(deps): update all non-major dependencies (#2784)
  • f36d854 fix(navigation): respect query locale (#2772)
  • b429b18 fix(build): keep parser deps out of main bundle (#2780)
  • a957fb4 chore(deps): update all non-major dependencies (#2782)
  • 488e170 chore: upgrade `@ nuxtjs/mdc` (#2781)
  • 05e9172 chore(deps): update all non-major dependencies (#2720)
  • 18aa97e chore: upgrade deps
  • d8653a6 docs: fix typo in SSR warning on Installation page (#2777)
  • f65657f docs: changed types path (#2735)
  • 482cad0 fix: corrected .gradient class (#2723)
  • 9e5be23 chore(deps): update dependency @ vueuse/nuxt to v11 (#2752)
  • d86aa48 chore(deps): update dependency @ vueuse/core to v11 (#2751)
  • 3c753c5 fix(docs): add warning about using `ssr: false` with Content (#2776)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)

Copy link

vercel bot commented Oct 21, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
vaah-docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback Oct 21, 2024 7:39pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants