Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Patch vulnérabilité #790

Open
wants to merge 28 commits into
base: master
Choose a base branch
from
Open

Patch vulnérabilité #790

wants to merge 28 commits into from

Conversation

alphaleadership
Copy link

No description provided.

snyk-bot and others added 16 commits December 12, 2024 09:47
@snyk-bot
fix: package.json & package-lock.json to reduce vulnerabilities
40cf10e 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-SEMVER-3247795
- https://snyk.io/vuln/SNYK-JS-SERIALIZEJAVASCRIPT-6147607
- https://snyk.io/vuln/SNYK-JS-TAR-6476909
- https://snyk.io/vuln/SNYK-JS-TINYMCE-1056408
- https://snyk.io/vuln/SNYK-JS-TINYMCE-1298037
- https://snyk.io/vuln/SNYK-JS-TINYMCE-1766967
- https://snyk.io/vuln/SNYK-JS-TINYMCE-1910225
- https://snyk.io/vuln/SNYK-JS-TINYMCE-3166281
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6016276
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6016290
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6062167
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6501006
- https://snyk.io/vuln/SNYK-JS-TINYMCE-6501605
- https://snyk.io/vuln/SNYK-JS-TINYMCE-7278053
- https://snyk.io/vuln/SNYK-JS-TINYMCE-7278059
- https://snyk.io/vuln/SNYK-JS-WEBPACK-7840298
- https://snyk.io/vuln/SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555
- https://snyk.io/vuln/SNYK-JS-WS-7266574
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6179663
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6515651
- https://snyk.io/vuln/SNYK-JS-ELECTRON-5923343
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6137744
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302899
- https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
- https://snyk.io/vuln/SNYK-JS-ELECTRON-5880432
- https://snyk.io/vuln/SNYK-JS-IP-6240864
- https://snyk.io/vuln/SNYK-JS-BRACES-6838727
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6253729
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6515650
- https://snyk.io/vuln/SNYK-JS-APPBUILDERLIB-6371201
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8186889
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302889
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6146929
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6146931
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6226524
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6253728
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6515649
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6515652
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6579648
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6613084
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6613085
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6854260
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411376
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411377
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411378
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411379
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411381
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411382
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411383
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411386
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411387
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411389
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302877
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8310521
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411388
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7443353
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7443354
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7443355
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7443356
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7577919
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7577921
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7707759
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302881
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302883
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302885
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302887
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302893
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302895
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8381010
- https://snyk.io/vuln/SNYK-JS-IP-7148531
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6173171
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6261583
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6564965
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7707753
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7707755
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7707756
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7707757
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7707758
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7707760
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8186838
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302891
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8310517
- https://snyk.io/vuln/SNYK-JS-ELECTRON-5885098
- https://snyk.io/vuln/SNYK-JS-DOMPURIFY-8184974
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7707754
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
- https://snyk.io/vuln/SNYK-JS-NANOID-8492085
- https://snyk.io/vuln/SNYK-JS-DOMPURIFY-7984421
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3370529
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6146930
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6146932
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6613086
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6043905
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6043907
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6476870
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6405830
- https://snyk.io/vuln/SNYK-JS-ELECTRONUPDATER-7431097
- https://snyk.io/vuln/SNYK-JS-DOMPURIFY-6474511
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6173170
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411384
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411385
- https://snyk.io/vuln/SNYK-JS-ROLLUP-8073097
- https://snyk.io/vuln/SNYK-JS-ELECTRON-5734243
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6105391
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8230426
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302879
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8302897
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8310519
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8352921
- https://snyk.io/vuln/SNYK-JS-ELECTRON-8381013
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6613087
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6346758
- https://snyk.io/vuln/SNYK-JS-ELECTRON-6097142
- https://snyk.io/vuln/SNYK-JS-EXPRESS-6474509
- https://snyk.io/vuln/SNYK-JS-GOT-2932019
- https://snyk.io/vuln/SNYK-JS-ELECTRON-7411390
- https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818
@alphaleadership
Merge pull request #1 from thomas-iniguez-visioli/snyk-fix-ca0ce4667b…
43b98b5 
…06637b50393edf9b09b62d

[Snyk] Fix for 117 vulnerabilities
@snyk-bot
fix: package.json & package-lock.json to reduce vulnerabilities
3adf876 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
@alphaleadership
Merge pull request #2 from thomas-iniguez-visioli/snyk-fix-d9b2db02e0…
0077db0 
…b6a03f57139129f5270eb9

[Snyk] Fix for 1 vulnerabilities
@snyk-bot
fix: upgrade @types/jasmine from 3.6.11 to 3.10.18
d0a46d2 
Snyk has created this PR to upgrade @types/jasmine from 3.6.11 to 3.10.18.

See this package in npm:
@types/jasmine

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade ts-node from 8.3.0 to 8.10.2
22fea67 
Snyk has created this PR to upgrade ts-node from 8.3.0 to 8.10.2.

See this package in npm:
ts-node

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade html2canvas from 1.0.0 to 1.4.1
209db9a 
Snyk has created this PR to upgrade html2canvas from 1.0.0 to 1.4.1.

See this package in npm:
html2canvas

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade zone.js from 0.11.8 to 0.15.0
d3aeebf 
Snyk has created this PR to upgrade zone.js from 0.11.8 to 0.15.0.

See this package in npm:
zone.js

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade sass from 1.79.0 to 1.81.0
e61d826 
Snyk has created this PR to upgrade sass from 1.79.0 to 1.81.0.

See this package in npm:
sass

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@alphaleadership
Merge pull request #7 from thomas-iniguez-visioli/snyk-upgrade-7244fd…
e676b33 
…89c4e7bfd735190d23f8258e8c

[Snyk] Upgrade sass from 1.79.0 to 1.81.0
@alphaleadership
Merge pull request #6 from thomas-iniguez-visioli/snyk-upgrade-dbd9e6…
aa5be00 
…60099194e3cb8c70685055a70e

[Snyk] Upgrade zone.js from 0.11.8 to 0.15.0
@alphaleadership
Merge pull request #5 from thomas-iniguez-visioli/snyk-upgrade-32690d…
cb23e3d 
…b5362f979b05283c8786f23a58

[Snyk] Upgrade html2canvas from 1.0.0 to 1.4.1
@alphaleadership
Merge branch 'master' into snyk-upgrade-a432ea437e2cc68fc0d4066f5423d8f1
8edba38
@alphaleadership
Merge pull request #4 from thomas-iniguez-visioli/snyk-upgrade-a432ea…
872a8ee 
…437e2cc68fc0d4066f5423d8f1

[Snyk] Upgrade ts-node from 8.3.0 to 8.10.2
@alphaleadership
Merge pull request #3 from thomas-iniguez-visioli/snyk-upgrade-ffc07a…
c8243d4 
…54ef44a1386144b4545b944133

[Snyk] Upgrade @types/jasmine from 3.6.11 to 3.10.18
@alphaleadership
Update codeql-analysis.yml
6ab6c26
@alphaleadership
Copy link
Author

@brunto

snyk-bot and others added 10 commits December 30, 2024 00:16
@snyk-bot
fix: upgrade cypress from 13.13.0 to 13.16.1
87e01c5 
Snyk has created this PR to upgrade cypress from 13.13.0 to 13.16.1.

See this package in npm:
cypress

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade tinymce from 7.0.0 to 7.5.1
969a4e3 
Snyk has created this PR to upgrade tinymce from 7.0.0 to 7.5.1.

See this package in npm:
tinymce

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade electron-updater from 6.3.0 to 6.3.9
cd275dd 
Snyk has created this PR to upgrade electron-updater from 6.3.0 to 6.3.9.

See this package in npm:
electron-updater

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade electron-builder from 25.0.6 to 25.1.8
40f39a4 
Snyk has created this PR to upgrade electron-builder from 25.0.6 to 25.1.8.

See this package in npm:
electron-builder

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@snyk-bot
fix: upgrade core-js from 3.35.0 to 3.39.0
f7e6f8d 
Snyk has created this PR to upgrade core-js from 3.35.0 to 3.39.0.

See this package in npm:
core-js

See this project in Snyk:
https://app.snyk.io/org/bot-sit/project/ce8119cc-30ea-4406-95cd-7a7b8ffb8d48?utm_source=github&utm_medium=referral&page=upgrade-pr
@alphaleadership
Merge pull request #12 from thomas-iniguez-visioli/snyk-upgrade-b06c0…
5a93b28 
…98e7eeea23c46369ff1bfcba3fc

[Snyk] Upgrade core-js from 3.35.0 to 3.39.0
@alphaleadership
Merge pull request #11 from thomas-iniguez-visioli/snyk-upgrade-70d97…
19cd0af 
…2a5888a8e7ef84935a10db6a809

[Snyk] Upgrade electron-builder from 25.0.6 to 25.1.8
@alphaleadership
Merge pull request #10 from thomas-iniguez-visioli/snyk-upgrade-f119f…
93a931d 
…cfee43dd1860b0cd5835d976dd8

[Snyk] Upgrade electron-updater from 6.3.0 to 6.3.9
@alphaleadership
Merge pull request #9 from thomas-iniguez-visioli/snyk-upgrade-f2f580…
26a84ce 
…699385e26234294029867cd751

[Snyk] Upgrade tinymce from 7.0.0 to 7.5.1
@alphaleadership
Merge pull request #8 from thomas-iniguez-visioli/snyk-upgrade-4ecee8…
711e2b0 
…1f0429a22f2702eb779845129a

[Snyk] Upgrade cypress from 13.13.0 to 13.16.1
@brunto
Copy link
Collaborator

brunto commented Jan 6, 2025

Thank you for your contribution. We will look into it soon.
Could you also run yarn install to update the yarn.lock?

@brunto brunto self-requested a review January 6, 2025 08:29
@alphaleadership
Copy link
Author

Yes

kevin-atnos
kevin-atnos requested changes Jan 6, 2025
View reviewed changes
package.json Show resolved Hide resolved
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kevin-atnos kevin-atnos kevin-atnos requested changes

@brunto brunto Awaiting requested review from brunto

Requested changes must be addressed to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@alphaleadership @brunto @kevin-atnos @snyk-bot