[Snyk] Upgrade: , , react-router-dom, react-scripts

[yash509]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@craco/craco
from 6.2.0 to 6.4.5 | 7 versions ahead of your current version | 2 years ago
on 2022-07-07
@testing-library/jest-dom
from 5.14.1 to 5.17.0 | 9 versions ahead of your current version | a year ago
on 2023-07-18
react-router-dom
from 5.2.0 to 5.3.4 | 6 versions ahead of your current version | 2 years ago
on 2022-10-02
react-scripts
from 4.0.1 to 4.0.3 | 2 versions ahead of your current version | 4 years ago
on 2021-02-22

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Prototype Poisoning SNYK-JS-QS-3153490	176	Proof of Concept
	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	176	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	176	Proof of Concept
	Improper Input Validation SNYK-JS-URLPARSE-2407770	176	Proof of Concept
	Prototype Pollution SNYK-JS-ASYNC-2441827	176	Proof of Concept
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	176	No Known Exploit
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	176	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	176	Proof of Concept
	Information Exposure SNYK-JS-EVENTSOURCE-2823375	176	Proof of Concept
	Access Restriction Bypass SNYK-JS-URLPARSE-2401205	176	Proof of Concept
	Authorization Bypass SNYK-JS-URLPARSE-2407759	176	Proof of Concept
	Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	176	Proof of Concept
	Open Redirect SNYK-JS-EXPRESS-6474509	176	No Known Exploit
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	176	No Known Exploit
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	176	No Known Exploit
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	176	No Known Exploit
	Cross-site Scripting SNYK-JS-SEND-7926862	176	No Known Exploit
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	176	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	176	Proof of Concept

Release notes

Package name: @craco/craco

• 6.4.5 - 2022-07-07
  
  • Reverted to v6.4.3. #425
• 6.4.4 - 2022-07-01
  
  • Fixed undefined properties error in tests. #425 #432
• 6.4.3 - 2021-12-09
  

  New typescript config loader: #347

• 6.4.2 - 2021-11-24
  

  Fix ts config support with function syntax #344

• 6.4.1 - 2021-11-19
• 6.4.0 - 2021-10-25
• 6.3.0 - 2021-09-11
• 6.2.0 - 2021-07-04

from @craco/craco GitHub release notes

Package name: @testing-library/jest-dom

• 5.17.0 - 2023-07-18
  

  5.17.0 (2023-07-18)

  Features

  • New toHaveAccessibleErrorMessage better implementing the spec, deprecate toHaveErrorMessage (#503) (d717c66)
• 5.16.5 - 2022-08-04
  

  5.16.5 (2022-08-04)

  Bug Fixes

  • migrate ccs v3 to @ adobe/css-tools v4 (#470) (948d90f)
• 5.16.4 - 2022-04-05
  

  5.16.4 (2022-04-05)

  Bug Fixes

  • Support unenclosed inner text for details elements in to be visible (#396) (af18453)
• 5.16.3 - 2022-03-24
  

  5.16.3 (2022-03-24)

  Bug Fixes

  • clarify toHaveFocus message when using .not (#447) (6988a67)
• 5.16.2 - 2022-02-03
  

  5.16.2 (2022-02-03)

  Bug Fixes

  • add custom element support to toBeDisabled (#368) (8162115)
• 5.16.1 - 2021-12-06
  

  5.16.1 (2021-12-06)

  Bug Fixes

  • Improve toHaveClass error message format (#405) (a9beb47)
• 5.16.0 - 2021-12-03
  

  5.16.0 (2021-12-03)

  Features

  • Update aria-query to 5.0.0 (#414) (de26c7a)
• 5.15.1 - 2021-11-23
  

  5.15.1 (2021-11-23)

  Bug Fixes

  • wrong deprecate error message (#422) (dfcefa2)
• 5.15.0 - 2021-11-02
  

  5.15.0 (2021-11-02)

  Features

  • import parse directly from css (#415) (4cb606c)
• 5.14.1 - 2021-06-11
  

  5.14.1 (2021-06-11)

  Bug Fixes

  • Updates deprecated matchers info (#378) (fc9ce6d)

from @testing-library/jest-dom GitHub release notes

Package name: react-router-dom

• 5.3.4 - 2022-10-02
• 5.3.3 - 2022-05-18
• 5.3.2 - 2022-05-17
• 5.3.1 - 2022-04-17
• 5.3.0 - 2021-09-03
• 5.2.1 - 2021-08-27
• 5.2.0 - 2020-05-11

from react-router-dom GitHub release notes

Package name: react-scripts

• 4.0.3 - 2021-02-22
• 4.0.2 - 2021-02-03
• 4.0.1 - 2020-11-23

from react-scripts GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs