Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

[Snyk] Security upgrade jimp from 0.9.8 to 0.12.0 #26

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
snyk-bot wants to merge 1 commit into master
base: master
Choose a base branch
Loading
from snyk-fix-33e476f6fcd96d05e761316611cbbfa7

Conversation

@snyk-bot
Copy link

@snyk-bot snyk-bot commented May 21, 2020

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

✨What is Merge Advice? We check thousands of dependency upgrade pull requests and CI tests every day to see which upgrades were successfully merged. After crunching this data, we give a recommendation on how safe we think the change is for you to merge without causing issues. Learn more, and share your feedback to help improve this feature. 🙏

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Denial of Service (DoS)
SNYK-JS-JPEGJS-570039
No No Known Exploit
Commit messages
Package name: jimp The new version differs by 22 commits.
  • 2b3413a Bump version to: v0.12.0 [skip ci]
  • 0bd02d5 Update CHANGELOG.md [skip ci]
  • 651de24 Fix package.json
  • a2b44a1 Add readme description
  • 697f2a6 Remove compiling polyfills into published code (#891)
  • ec736c9 Bump version to: v0.11.0 [skip ci]
  • a52b096 Update CHANGELOG.md [skip ci]
  • 2f99663 Make callback optional for Jimp.rgbaToInt (#889)
  • 585c1ab Removed Core-JS as a dependency. (#882)
  • 3719710 Bump version to: v0.10.3 [skip ci]
  • 30f04f7 Update CHANGELOG.md [skip ci]
  • e93497a Simplify and fix flip (#879)
  • dd7a6ba Bump version to: v0.10.2 [skip ci]
  • baf756c Update CHANGELOG.md [skip ci]
  • b038cba Rewrite handling EXIF orientation — add tests, make it plugin-independent (#875)
  • 44ce60b Bump version to: v0.10.1 [skip ci]
  • da6bf75 Update CHANGELOG.md [skip ci]
  • bd5ba89 Update package.json (#870)
  • 3cc4a4c Fix a `loadFont` and case inconsistency of `jimp` (#868)
  • c23237b Bump version to: v0.10.0 [skip ci]
  • 1add0ba Update CHANGELOG.md [skip ci]
  • e1d05da Properly split constructor and instance types (#867)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

AltStyle によって変換されたページ (->オリジナル) /