Skip to content

[Snyk] Fix for 28 vulnerabilities #144

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
Thompson1985 wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Fix for 28 vulnerabilities #144

Thompson1985 wants to merge 1 commit into from

Conversation

@Thompson1985
Copy link
Owner

@Thompson1985 Thompson1985 commented Oct 10, 2025

snyk-top-banner

Snyk has created this PR to fix 28 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • examples/solidstart-1/package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Incorrect Authorization
SNYK-JS-VITE-9512410		   340  
high severity Insecure Randomness
SNYK-JS-UNDICI-8641354		   185  
medium severity Access Control Bypass
SNYK-JS-VITE-9576207		   179  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230		   169  
high severity Excessive Platform Resource Consumption within a Loop
SNYK-JS-BRACES-6838727		   159  
high severity Incorrect Authorization
SNYK-JS-VITE-9653016		   155  
medium severity Improper Access Control
SNYK-JS-VITE-6531286		   146  
medium severity Origin Validation Error
SNYK-JS-VITE-8648411		   142  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELHELPERS-9397697		   140  
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909		   132  
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		   131  
medium severity Information Exposure
SNYK-JS-VITE-9685035		   129  
medium severity Directory Traversal
SNYK-JS-VITE-9919777		   129  
low severity Cross-site Scripting (XSS)
SNYK-JS-VITE-8022916		   127  
medium severity Information Exposure
SNYK-JS-VITE-8023174		   108  
medium severity Cross-site Scripting (XSS)
SNYK-JS-ROLLUP-8073097		   100  
medium severity Cross-site Scripting (XSS)
SNYK-JS-SOLIDJS-8743940		   100  
low severity Cross-site Scripting
SNYK-JS-SEND-7926862		   69  
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865		   69  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106		   63  
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073		   57  
low severity Missing Release of Memory after Effective Lifetime
SNYK-JS-UNDICI-10176064		   57  
low severity Improper Authorization
SNYK-JS-UNDICI-6564964		   57  
low severity Directory Traversal
SNYK-JS-SIRV-12558119		   51  
low severity Relative Path Traversal
SNYK-JS-VITE-12558116		   51  
medium severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		   45  
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085		   44  
low severity Improper Access Control
SNYK-JS-UNDICI-6564963		   26  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Improper Input Validation
🦉 Cross-site Scripting (XSS)
🦉 More lessons are available in Snyk Learn

@snyk-bot
fix: examples/solidstart-1/package.json to reduce vulnerabilities
2587d0a 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-VITE-9512410
- https://snyk.io/vuln/SNYK-JS-UNDICI-8641354
- https://snyk.io/vuln/SNYK-JS-VITE-9576207
- https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
- https://snyk.io/vuln/SNYK-JS-BRACES-6838727
- https://snyk.io/vuln/SNYK-JS-VITE-9653016
- https://snyk.io/vuln/SNYK-JS-VITE-6531286
- https://snyk.io/vuln/SNYK-JS-VITE-8648411
- https://snyk.io/vuln/SNYK-JS-BABELHELPERS-9397697
- https://snyk.io/vuln/SNYK-JS-TAR-6476909
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
- https://snyk.io/vuln/SNYK-JS-VITE-9685035
- https://snyk.io/vuln/SNYK-JS-VITE-9919777
- https://snyk.io/vuln/SNYK-JS-VITE-8022916
- https://snyk.io/vuln/SNYK-JS-VITE-8023174
- https://snyk.io/vuln/SNYK-JS-ROLLUP-8073097
- https://snyk.io/vuln/SNYK-JS-SOLIDJS-8743940
- https://snyk.io/vuln/SNYK-JS-SEND-7926862
- https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865
- https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-7925106
- https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073
- https://snyk.io/vuln/SNYK-JS-UNDICI-10176064
- https://snyk.io/vuln/SNYK-JS-UNDICI-6564964
- https://snyk.io/vuln/SNYK-JS-SIRV-12558119
- https://snyk.io/vuln/SNYK-JS-VITE-12558116
- https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728
- https://snyk.io/vuln/SNYK-JS-NANOID-8492085
- https://snyk.io/vuln/SNYK-JS-UNDICI-6564963
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@Thompson1985 @snyk-bot