[Snyk] Upgrade gatsby-plugin-image from 3.0.0 to 3.13.0 #373

X-oss-byte · 2024-01-08T20:48:37Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade gatsby-plugin-image from 3.0.0 to 3.13.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 46 versions ahead of your current version.
The recommended version was released 21 days ago, on 2023-12-18.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-SOCKETIOPARSER-5596892	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-ENGINEIO-3136336	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Sandbox Bypass SNYK-JS-WEBPACK-3358798	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-IMMER-1019369	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-GATSBYCLI-5671903	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-GATSBYPLUGINSHARP-5425803	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Information Exposure SNYK-JS-GATSBYPLUGINSHARP-5671648	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-GRAPHQL-5905181	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Heap-based Buffer Overflow SNYK-JS-SHARP-5922108	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Mature
Regular Expression Denial of Service (ReDoS) SNYK-JS-SIDEWAYFORMULA-3317169	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-3244450	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-GATSBY-5671647	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-IMMER-1540542	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-MSGPACKR-6140431	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Improper Input Validation SNYK-JS-POSTCSS-5926692	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: gatsby-plugin-image

3.13.0 - 2023-12-18
3.13.0-next.1 - 2023-11-16
3.13.0-next.0 - 2023-07-25
3.13.0-alpha-alt-image-cdn.44 - 2023-11-03
3.12.3 - 2023-10-26
3.12.2 - 2023-10-20
3.12.1 - 2023-10-09
3.12.0 - 2023-08-24
3.12.0-next.1 - 2023-07-03
3.12.0-next.0 - 2023-06-15
3.11.0 - 2023-06-15
3.11.0-next.1 - 2023-06-05
3.11.0-next.0 - 2023-05-16
3.10.0 - 2023-05-16
3.10.0-next.2 - 2023-05-03
3.10.0-next.1 - 2023-04-27
3.10.0-next.0 - 2023-04-18
3.9.0 - 2023-04-18
3.9.0-next.1 - 2023-04-06
3.9.0-next.0 - 2023-03-21
3.9.0-image-cdn-configurable.4 - 2023-04-11
3.8.0 - 2023-03-21
3.8.0-next.0 - 2023-02-16
3.7.0 - 2023-02-21
3.7.0-next.0 - 2023-02-03
3.6.0 - 2023-02-07
3.6.0-next.1 - 2023-01-26
3.6.0-next.0 - 2023-01-19
3.5.0 - 2023-01-24
3.5.0-next.1 - 2023-01-17
3.5.0-next.0 - 2023-01-05
3.4.0 - 2023-01-10
3.4.0-next.2 - 2023-01-04
3.4.0-next.1 - 2022-12-14
3.4.0-next.0 - 2022-12-08
3.3.2 - 2022-12-14
3.3.1 - 2022-12-14
3.3.0 - 2022-12-13
3.3.0-next.3 - 2022-12-07
3.3.0-next.2 - 2022-12-06
3.3.0-next.1 - 2022-12-01
3.3.0-next.0 - 2022-11-25
3.2.0 - 2022-11-25
3.2.0-next.0 - 2022-11-17
3.1.0 - 2022-11-22
3.1.0-next.0 - 2022-11-08
3.0.0 - 2022-11-08

from gatsby-plugin-image GitHub release notes

Commit messages

Package name: gatsby-plugin-image

18ffcfa chore(release): Publish
1953e5c fix(gatsby): allow gatsby-adapter-netlify@">=1.0.0 <=1.0.3" for gatsby@<5.12.10 (fix(gatsby): allow gatsby-adapter-netlify@">=1.0.0 <=1.0.3" for gatsby@<5.12.10 gatsbyjs/gatsby#38758)
4a780fb feat: image and file cdn url generator adapter implementation (feat: image and file cdn url generator adapter implementation gatsbyjs/gatsby#38685)
f8c207b chore: move gatsby-plugin-netlify-cms to deprecated-packages (chore: move gatsby-plugin-netlify-cms to deprecated-packages gatsbyjs/gatsby#38755)
6d1d97e chore(gatsby-plugin-netlify-cms): add deprecation notice (chore(gatsby-plugin-netlify-cms): add deprecation notice gatsbyjs/gatsby#38753)
7a7fa5f chore(deps): update dependency @ types/jscodeshift to ^0.11.11 for gatsby-codemods (chore(deps): update dependency @types/jscodeshift to ^0.11.11 for gatsby-codemods gatsbyjs/gatsby#38595)
8919982 fix(deps): update dependency gatsby-plugin-webpack-bundle-analyser-v2 to ^1.1.32 (fix(deps): update dependency gatsby-plugin-webpack-bundle-analyser-v2 to ^1.1.32 gatsbyjs/gatsby#38722)
d148295 chore(deps): update [dev] minor and patch dependencies for gatsby-cli (chore(deps): update [dev] minor and patch dependencies for gatsby-cli gatsbyjs/gatsby#38592)
37f2288 chore(deps): update dependency rimraf to ^5.0.5 (chore(deps): update dependency rimraf to ^5.0.5 gatsbyjs/gatsby#38596)
0faf0fe chore(deps): update dependency rimraf to ^5.0.5 for gatsby-telemetry (chore(deps): update dependency rimraf to ^5.0.5 for gatsby-telemetry gatsbyjs/gatsby#38597)
31272e9 chore(deps): update dependency rimraf to ^5.0.5 for gatsby-worker (chore(deps): update dependency rimraf to ^5.0.5 for gatsby-worker gatsbyjs/gatsby#38598)
edcb035 chore(deps): update dependency start-server-and-test to ^2.0.3 (chore(deps): update dependency start-server-and-test to ^2.0.3 gatsbyjs/gatsby#38599)
956e30c chore(deps): update dependency wait-on to ^7.2.0 (chore(deps): update dependency wait-on to ^7.2.0 gatsbyjs/gatsby#38724)
c1138ad chore(deps): update dependency fs-extra to ^11.2.0 (chore(deps): update dependency fs-extra to ^11.2.0 gatsbyjs/gatsby#38723)
aa60f1c chore(changelogs): update changelogs (chore(changelogs): update changelogs gatsbyjs/gatsby#38749)
649a5a0 fix(deps): update starters and examples gatsby packages to ^5.12.12 (fix(deps): update starters and examples gatsby packages to ^5.12.12 gatsbyjs/gatsby#38748)
268a640 chore: update gatsby-adapter-netlify version manifest (chore: update gatsby-adapter-netlify version manifest gatsbyjs/gatsby#38745)
5e8d2bb fix(deps): update starters and examples - gatsby (fix(deps): update starters and examples - gatsby gatsbyjs/gatsby#38582)
0d7d6af chore(changelogs): update changelogs (chore(changelogs): update changelogs gatsbyjs/gatsby#38743)
7f349ff chore(release): Publish next
8b9ee3f feat(gatsby-plugin-google-tagmanager): add self hosted path option (feat(gatsby-plugin-google-tagmanager): add self hosted path option gatsbyjs/gatsby#38731)
0f4e4df chore: bump caniuse-lite (chore: bump caniuse-lite gatsbyjs/gatsby#38733)
be36b4a fix(gatsby-source-contentful): don't apply parent node links to child nodes (fix(gatsby-source-contentful): don't apply parent node links to child nodes gatsbyjs/gatsby#38728)
3496c56 chore(changelogs): update changelogs (chore(changelogs): update changelogs gatsbyjs/gatsby#38718)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade gatsby-plugin-image from 3.0.0 to 3.13.0. See this package in npm: https://www.npmjs.com/package/gatsby-plugin-image See this project in Snyk: https://app.snyk.io/org/sammyfilly/project/4d0e3b9c-be4d-47f2-840c-b487311dd2e0?utm_source=github&utm_medium=referral&page=upgrade-pr

stackblitz · 2024-01-08T20:48:40Z

Run & review this pull request in StackBlitz Codeflow.

changeset-bot · 2024-01-08T20:48:41Z

⚠️ No Changeset found

Latest commit: 3e5cd71

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade gatsby-plugin-image from 3.0.0 to 3.13.0 #373

[Snyk] Upgrade gatsby-plugin-image from 3.0.0 to 3.13.0 #373

X-oss-byte commented Jan 8, 2024

stackblitz bot commented Jan 8, 2024

changeset-bot bot commented Jan 8, 2024

[Snyk] Upgrade gatsby-plugin-image from 3.0.0 to 3.13.0 #373

Are you sure you want to change the base?

[Snyk] Upgrade gatsby-plugin-image from 3.0.0 to 3.13.0 #373

Conversation

X-oss-byte commented Jan 8, 2024

Snyk has created this PR to upgrade gatsby-plugin-image from 3.0.0 to 3.13.0.

stackblitz bot commented Jan 8, 2024

changeset-bot bot commented Jan 8, 2024

⚠️ No Changeset found