Skip to content

Conversation

@hashim21223445
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade @vitest/coverage-v8 from 2.0.2 to 2.1.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 19 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
169 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
169 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
169 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
169 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-ROLLUP-8073097
169 Proof of Concept
medium severity Information Exposure
SNYK-JS-VITE-8023174
169 Proof of Concept
low severity Cross-site Scripting (XSS)
SNYK-JS-VITE-8022916
169 Proof of Concept
Release notes
Package name: @vitest/coverage-v8

Snyk has created this PR to upgrade @vitest/coverage-v8 from 2.0.2 to 2.1.8.

See this package in npm:
@vitest/coverage-v8

See this project in Snyk:
https://app.snyk.io/org/hashim21223445/project/dcfa165f-9136-4a3b-b8e1-e361eada1f4e?utm_source=github&utm_medium=referral&page=upgrade-pr
@semanticdiff-com
Copy link

semanticdiff-com bot commented Dec 31, 2024

Review changes with  SemanticDiff

Changed Files
File Status
  package.json  0% smaller

@github-actions
Copy link

👋 Hi! Thank you for this contribution! Just to let you know, our GitHub SDK team does a round of issue and PR reviews twice a week, every Monday and Friday! We have a process in place for prioritizing and responding to your input. Because you are a part of this community please feel free to comment, add to, or pick up any issues/PRs that are labeled with Status: Up for grabs. You & others like you are the reason all of this works! So thank you & happy coding! 🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants