Skip to content
This repository was archived by the owner on Apr 20, 2023. It is now read-only.

[Snyk] Upgrade angular from 1.5.8 to 1.7.9 #3

Merged
merged 1 commit into from
Mar 16, 2020

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Mar 7, 2020

Snyk has created this PR to upgrade angular from 1.5.8 to 1.7.9.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 28 versions ahead of your current version.
  • The recommended version was released 4 months ago, on 2019-11-19.

The recommended version fixes:

Severity Issue Exploit Maturity
Prototype Pollution
SNYK-JS-ANGULAR-534884
Proof of Concept
Cross-site Scripting (XSS)
npm:angular:20180202
No Known Exploit
Cross-site Scripting (XSS)
npm:angular:20171018
No Known Exploit
Content Security Policy (CSP) Bypass
npm:angular:20161101
No Known Exploit
JSONP Callback Attack
npm:angular:20150315
No Known Exploit
Denial of Service (DoS)
SNYK-JS-ANGULAR-471885
No Known Exploit
Cross-site Scripting (XSS)
SNYK-JS-ANGULAR-471882
No Known Exploit
Cross-site Scripting (XSS)
SNYK-JS-ANGULAR-471879
No Known Exploit
Release notes
Package name: angular
  • 1.7.9 - 2019-11-19

    chore(release): v1.7.9 codename(pollution-eradication)

  • 1.7.8 - 2019-03-11

    chore(release): v1.7.8 codename(enthusiastic-oblation)

  • 1.7.7 - 2019-02-04

    chore(release): v1.7.7 codename(kingly-exiting)

  • 1.7.6 - 2019-01-17

    chore(release): v1.7.6 codename(gravity-manipulation)

  • 1.7.5 - 2018-10-04

    chore(release): v1.7.5 codename(anti-prettification)

  • 1.7.4 - 2018-09-07

    chore(release): v1.7.4 codename(interstellar-exploration)

  • 1.7.3 - 2018-08-08

    chore(release): v1.7.3 codename(eventful-proposal)

  • 1.7.2 - 2018-06-12

    chore(release): v1.7.2 codename(extreme-compatiplication)

  • 1.7.1 - 2018-06-08

    chore(release): v1.7.1 codename(momentum-defiance)

  • 1.7.0 - 2018-05-11

    chore(release): v1.7.0 codename(nonexistent-physiology)

  • 1.7.0-rc.0 - 2018-04-19
  • 1.6.10 - 2018-04-17
  • 1.6.9 - 2018-02-02
  • 1.6.8 - 2017-12-21
  • 1.6.7 - 2017-11-24
  • 1.6.6 - 2017-08-18
  • 1.6.5 - 2017-07-03
  • 1.6.4 - 2017-03-31
  • 1.6.3 - 2017-03-08
  • 1.6.2 - 2017-02-07
  • 1.6.1 - 2016-12-23
  • 1.6.0 - 2016-12-08
  • 1.6.0-rc.2 - 2016-11-24
  • 1.6.0-rc.1 - 2016-11-21
  • 1.6.0-rc.0 - 2016-10-27
  • 1.5.11 - 2017-01-12
  • 1.5.10 - 2016-12-16
  • 1.5.9 - 2016-11-24
  • 1.5.8 - 2016-07-22
from angular GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[//]: # (snyk:metadata:{"dependencies":[{"name":"angular","from":"1.5.8","to":"1.7.9"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/yowainwright/project/03b099ed-f55b-4b6c-983e-577944d94ddf?utm_source=github&utm_medium=upgrade-pr","projectPublicId":"03b099ed-f55b-4b6c-983e-577944d94ddf","env":"prod","prType":"upgrade","vulns":["SNYK-JS-ANGULAR-534884","npm:angular:20180202","npm:angular:20171018","npm:angular:20161101","npm:angular:20150315","SNYK-JS-ANGULAR-471885","SNYK-JS-ANGULAR-471882","SNYK-JS-ANGULAR-471879"],"issuesToFix":[{"issueId":"SNYK-JS-ANGULAR-534884","severity":"high","title":"Prototype Pollution","exploitMaturity":"proof-of-concept"},{"issueId":"npm:angular:20180202","severity":"medium","title":"Cross-site Scripting (XSS)","exploitMaturity":"no-known-exploit"},{"issueId":"npm:angular:20171018","severity":"medium","title":"Cross-site Scripting (XSS)","exploitMaturity":"no-known-exploit"},{"issueId":"npm:angular:20161101","severity":"medium","title":"Content Security Policy (CSP) Bypass","exploitMaturity":"no-known-exploit"},{"issueId":"npm:angular:20150315","severity":"medium","title":"JSONP Callback Attack","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-ANGULAR-471885","severity":"medium","title":"Denial of Service (DoS)","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-ANGULAR-471882","severity":"medium","title":"Cross-site Scripting (XSS)","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-ANGULAR-471879","severity":"medium","title":"Cross-site Scripting (XSS)","exploitMaturity":"no-known-exploit"}],"upgrade":["SNYK-JS-ANGULAR-534884","npm:angular:20180202","npm:angular:20171018","npm:angular:20161101","npm:angular:20150315","SNYK-JS-ANGULAR-471885","SNYK-JS-ANGULAR-471882","SNYK-JS-ANGULAR-471879"],"upgradeInfo":{"versionsDiff":28,"publishedDate":"2019-11-19T09:30:03.381Z"},"templateVariants":[],"hasFixes":true,"isMajorUpgrade":false,"isBreakingChange":false})

@yowainwright yowainwright merged commit 2c3e707 into master Mar 16, 2020
@yowainwright yowainwright deleted the snyk-upgrade-03856b2c4ca161ad3283dbf916510568 branch March 16, 2020 06:47
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants