-
Notifications
You must be signed in to change notification settings - Fork 89
[Snyk] Security upgrade swagger-ui-react from 5.30.2 to 5.30.3 #1163
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Snyk] Security upgrade swagger-ui-react from 5.30.2 to 5.30.3 #1163
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-JSYAML-13961110
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Note Other AI code review bot(s) detectedCodeRabbit has detected other AI code review bot(s) in this pull request and will avoid duplicating their findings in the review comments. This may lead to a less comprehensive review. Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR upgrades swagger-ui-react from version 5.30.2 to 5.30.3 to address a medium-severity Prototype Pollution vulnerability (SNYK-JS-JSYAML-13961110) in the transitive dependency js-yaml.
Key Changes:
- Upgrades
swagger-ui-reactfrom 5.30.2 to 5.30.3 - Transitively upgrades
js-yamlfrom 4.1.0 to 4.1.1 (fixes the security vulnerability)
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updates swagger-ui-react dependency version to 5.30.3 |
| package-lock.json | Updates swagger-ui-react to 5.30.3 and js-yaml to 4.1.1 with pinned version constraint |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-JSYAML-13961110
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Prototype Pollution