Skip to content

[Snyk] Security upgrade powerbi-models from 0.10.1 to 1.0.0 #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

joseroubert08
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 681/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.2
Arbitrary Code Execution
SNYK-JS-JSEN-1014670
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: powerbi-models The new version differs by 97 commits.
  • 7ccacc8 skip cleanup to ensure npm modules exists.
  • 4aedac1 Merged PR 24299: fix spaces in test file.
  • 968f192 Merged PR 24298: Merge alihamud_merge_github to master
  • b3935ad Merge remote-tracking branch 'External/master'
  • cb87f49 Merged PR 24154: Models Refactor
  • 3000415 null check added
  • 02cbe8e no need for newline fix
  • d71ed34 tslint build fix
  • 73c9701 conflicts
  • 6e529bc merge with master + map validator added
  • 905302c rename qna embed publicly exposed properties and extra tests
  • 978cb34 Merged PR 24056: Merge alihamud_customLayout to master
  • 82479c1 Merge branch 'master' into alihamud_customLayout
  • d5fc11e models refactor v1.0.0 update
  • 8794258 Merged PR 24051: rename qna load config property
  • a1b2a48 Merged PR 24050: rename qna public properties
  • 9617309 x and y should be optional.
  • 5b19a58 schema name fix
  • 2960597 schema fixes
  • 469eb09 add visuals layout schema
  • be4682f visuals layout interfaces
  • e3ae3d1 initial version of validators
  • 22e4724 initial version of models refactor
  • 4bb079e 0.11.4

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Execution

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-JSEN-1014670
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants