Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings
This repository was archived by the owner on Aug 30, 2021. It is now read-only.

[Snyk] Security upgrade gulp-angular-templatecache from 2.0.0 to 2.1.0 #2080

Open
snyk-bot wants to merge 1 commit into master
base: master
Choose a base branch
Loading
from snyk-fix-5c934e3d9f33d43c6652dc9cef4c7493

Conversation

@snyk-bot
Copy link
Contributor

@snyk-bot snyk-bot commented May 30, 2021

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JS-TRIMNEWLINES-1298042
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: gulp-angular-templatecache The new version differs by 3 commits.
  • 76e74d2 Replace `gulp-util` dependency to support Gulp 4
  • 7a8c55c Merge branch 'demurgos-issue-148'
  • 04a5089 Drop dependency on deprecated `gulp-util`

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

AltStyle によって変換されたページ (->オリジナル) /