Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade react-router-dom from 6.21.1 to 6.22.2 #183

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

EchoSkorJjj
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade react-router-dom from 6.21.1 to 6.22.2.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 10 versions ahead of your current version.
  • The recommended version was released a month ago, on 2024-02-28.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864
537/1000
Why? Proof of Concept exploit, CVSS 8.6
Proof of Concept
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
537/1000
Why? Proof of Concept exploit, CVSS 8.6
Proof of Concept
Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
537/1000
Why? Proof of Concept exploit, CVSS 8.6
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react-router-dom
  • 6.22.2 - 2024-02-28

    [email protected]

  • 6.22.2-pre.0 - 2024-02-27

    [email protected]

  • 6.22.1 - 2024-02-16
  • 6.22.1-pre.0 - 2024-02-16
  • 6.22.0 - 2024-02-01
  • 6.22.0-pre.0 - 2024-01-31
  • 6.21.3 - 2024-01-18
  • 6.21.3-pre.0 - 2024-01-16
  • 6.21.2 - 2024-01-11
  • 6.21.2-pre.0 - 2024-01-09
  • 6.21.1 - 2023-12-21
from react-router-dom GitHub release notes
Commit messages
Package name: react-router-dom
  • 78c843b chore: Update version for release (#11314)
  • 8f52cd2 Exit prerelease mode
  • cd2f69d Update release date
  • e6b9e3b Draft release notes
  • e1421be chore: Update version for release (pre) (#11309)
  • eec4ca9 Enter prerelease mode
  • 7f93b4b Merge branch 'main' into release-next
  • 95acd38 Merge branch 'release-next' into dev
  • 74f8676 Merge branch 'release-next'
  • 6b22f91 Preserve hydrated errors during partial hydration (#11305)
  • 13ac1b6 chore: sort contributors list
  • 56fbdb2 Update context provider link to point to React's new documentation site (#11290)
  • 5f0cf32 chore: Update version for release (#11283)
  • 671a966 Exit prerelease mode
  • 25d16db chore: Update version for release (pre) (#11280)
  • 24685c9 Enter prerelease mode
  • b7e9836 Merge branch 'main' into release-next
  • c164837 chore: sort contributors list
  • 5d475a2 fix typo in faq.md (#11272)
  • 9aed7d0 docs: listen for close event on response, not request (#11249)
  • 135e8aa Add note on relative:path starting point
  • 9f36087 Fix typo in loader.md (#11256)
  • 362115a Update CI to node 20 and fix issue with build on experimental releases (#11257)
  • 241f2d4 Fix issues with pre-encoded param names not being properly decoded (#11199)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@EchoSkorJjj EchoSkorJjj self-assigned this Mar 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants