Skip to content

Conversation

Omrisnyk
Copy link
Owner

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • large-file/package.json
  • large-file/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
  58  
Release notes
Package name: @cypress/browserify-preprocessor from @cypress/browserify-preprocessor GitHub release notes
Package name: add-asset-html-webpack-plugin from add-asset-html-webpack-plugin GitHub release notes
Package name: babel-plugin-add-module-exports
  • 1.0.2 - 2019-04-17
  • 1.0.0 - 2018-09-11

    Documentation

    • remove [@ next](https://redirect.github.com/next) tag (7fd260d)

    BREAKING CHANGES

    • change v2 tag @ latest to @ legacy
from babel-plugin-add-module-exports GitHub release notes
Package name: brace-expansion from brace-expansion GitHub release notes
Package name: cacache
  • 17.0.0 - 2022-10-13

    17.0.0 (2022-10-13)

    ⚠️ BREAKING CHANGES

    • this module no longer attempts to change file ownership automatically
    • this package is now async only, all synchronous methods have been removed
    • cacache is now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0

    Features

  • 16.1.3 - 2022-08-23

    16.1.3 (2022-08-23)

    Dependencies

    • bump unique-filename from 1.1.1 to 2.0.0 (#123) (6235554)
  • 16.1.2 - 2022-08-15

    16.1.2 (2022-08-15)

    Bug Fixes

  • 16.1.1 - 2022-06-02

    16.1.1 (2022-06-02)

    Bug Fixes

    • read: change lstat to stat to correctly evaluate file size (#114) (e3a2928)
  • 16.1.0 - 2022-05-17

    16.1.0 (2022-05-17)

    Features

    • allow external integrity/size source (#110) (61785e1)

    Bug Fixes

    • move to async functions where possible (#106) (71d4389)
  • 16.0.7 - 2022-04-27

    16.0.7 (2022-04-27)

    Bug Fixes

    • put: don't flush if an error happened (e870016)
    • remove disposer (76ab648)
    • remove fs.copyFile checks (90776fd)
  • 16.0.6 - 2022-04-21

    16.0.6 (2022-04-21)

    Bug Fixes

    • normalize win32 paths before globbing (4bdd5d5)
  • 16.0.5 - 2022-04-20

    16.0.5 (2022-04-20)

    Dependencies

  • 16.0.4 - 2022-04-05

    16.0.4 (2022-04-05)

    Dependencies

    • bump @ npmcli/move-file from 1.1.2 to 2.0.0 (#94) (f3d64f6)
    • bump ssri from 8.0.1 to 9.0.0 (#95) (fb44f5f)
  • 16.0.3 - 2022-03-22

    16.0.3 (2022-03-22)

    Dependencies

    • bump @ npmcli/fs from 1.1.1 to 2.1.0 (#88) (9c9c91c)
    • update lru-cache requirement from ^7.5.1 to ^7.7.1 (#87) (800079f)
  • 16.0.2 - 2022-03-17
  • 16.0.1 - 2022-03-15
  • 16.0.0 - 2022-03-14
  • 15.3.0 - 2021-08-26
  • 15.2.0 - 2021-05-25
  • 15.1.0 - 2021-05-19
  • 15.0.6 - 2021-03-22
  • 15.0.5 - 2020-07-11
  • 15.0.4 - 2020-06-03
  • 15.0.3 - 2020-04-28
  • 15.0.2 - 2020-04-28
  • 15.0.1 - 2020-04-28
  • 15.0.0 - 2020-02-18
  • 14.0.0 - 2020-01-28
  • 13.0.1 - 2019-09-30
  • 13.0.0 - 2019-09-25
  • 12.0.4 - 2020-03-24
  • 12.0.3 - 2019-08-19
  • 12.0.2 - 2019-07-19
  • 12.0.1 - 2019-07-19
  • 12.0.0 - 2019-07-15
  • 11.3.3 - 2019-06-17
  • 11.3.2 - 2018-12-21
  • 11.3.1 - 2018-11-05
  • 11.3.0 - 2018-11-05
  • 11.2.0 - 2018-08-08
  • 11.1.0 - 2018-08-01
  • 11.0.3 - 2018-08-01
  • 11.0.2 - 2018-05-07
  • 11.0.1 - 2018-04-10
  • 11.0.0 - 2018-04-09
  • 10.0.4 - 2018-02-16
from cacache GitHub release notes
Package name: chokidar
  • 2.1.0 - 2019-02-05
  • 2.0.4 - 2018-06-18
  • 2.0.3 - 2018-03-23
  • 2.0.2 - 2018-02-14
  • 2.0.1 - 2018-02-08
  • 2.0.0 - 2017-12-29
from chokidar GitHub release notes
Package name: compression-webpack-plugin
  • 7.0.0 - 2020-12-02

    7.0.0 (2020-12-02)

    ⚠ BREAKING CHANGES

    • minimum supported webpack version is ^5.1.0
    • the cache option was removed, the plugin respects caching from configurations, please read
  • 6.1.2 - 2023-12-26
  • 6.1.1 - 2020-11-12

    6.1.1 (2020-11-12)

    Bug Fixes

    • compatibility with child compilations (5e3bb95)
  • 6.1.0 - 2020-11-09

    6.1.0 (2020-11-09)

    Features

    • added the keep-source-maps value to the deleteOriginalAssets option (#216) (bd60650)
  • 6.0.5 - 2020-11-02

    6.0.5 (2020-11-02)

    Bug Fixes

    • allowed compressed assets to overwrite original assets using the deleteOriginalAssets option (62d3d0a)
  • 6.0.4 - 2020-10-26

    6.0.4 (2020-10-26)

    Bug Fixes

    • always set compression level to maximum for the custom algorithm (483f328)
  • 6.0.3 - 2020-10-09

    6.0.3 (2020-10-09)

    Chore

    • update schema-utils
  • 6.0.2 - 2020-09-19

    6.0.2 (2020-09-19)

    Bug Fixes

  • 6.0.1 - 2020-09-16

    6.0.1 (2020-09-16)

    Bug Fixes

  • 6.0.0 - 2020-09-14

    ⚠ BREAKING CHANGES

    • default value of the filename option was changed to "[path][base].gz"
    • removed the [dir] placeholder, please use the [path] placeholder
    • the Function type of the filename option should return value with placeholders, please see an example

    Features

    • added [fragment], [base] and [path] placeholders for the filename option

    Bug Fixes

    • caching (#194) (9de2a88)
    • respect immutable flag for assets
  • 5.0.2 - 2020-09-02

    5.0.2 (2020-09-02)

    Bug Fixes

    • do not crash when the algorithm option return non Buffer (#190) (81bf601)
  • 5.0.1 - 2020-08-22
  • 5.0.0 - 2020-08-17
  • 4.0.1 - 2020-08-12
  • 4.0.0 - 2020-05-12
from compression-webpack-plugin GitHub release notes
Package name: cypress
  • 13.13.0 - 2024-07-01

    Changelog: https://docs.cypress.io/guides/references/changelog#13-13-0

  • 13.12.0 - 2024-06-18

    Changelog: https://docs.cypress.io/guides/references/changelog#13-12-0

  • 13.11.0 - 2024-06-04
  • 13.10.0 - 2024-05-21
  • 13.9.0 - 2024-05-07
  • 13.8.1 - 2024-04-23
  • 13.8.0 - 2024-04-18
  • 13.7.3 - 2024-04-11
  • 13.7.2 - 2024-04-02
  • 13.7.1 - 2024-03-21
  • 13.7.0 - 2024-03-13
  • 13.6.6 - 2024-02-22
  • 13.6.5 - 2024-02-20
  • 13.6.4 - 2024-01-30
  • 13.6.3 - 2024-01-16
  • 13.6.2 - 2023-12-26
  • 13.6.1 - 2023-12-05
  • 13.6.0 - 2023-11-21
  • 13.5.1 - 2023-11-14
  • 13.5.0 - 2023-11-08
  • 13.4.0 - 2023-10-30
  • 13.3.3 - 2023-10-24
  • 13.3.2 - 2023-10-18
  • 13.3.1 - 2023-10-11
  • 13.3.0 - 2023-09-27
  • 13.2.0 - 2023-09-12
  • 13.1.0 - 2023-08-31
  • 13.0.0 - 2023-08-29
  • 12.17.4 - 2023-08-15
  • 12.17.3 - 2023-08-01
  • 12.17.2 - 2023-07-20
  • 12.17.1 - 2023-07-10
  • 12.17.0 - 2023-07-06
  • 12.16.0 - 2023-06-26
  • 12.15.0 - 2023-06-20
  • 12.14.0 - 2023-06-07
  • 12.13.0 - 2023-05-23
  • 12.12.0 - 2023-05-09
  • 12.11.0 - 2023-04-26
  • 12.10.0 - 2023-04-17
  • 12.9.0 - 2023-03-28
  • 12.8.1 - 2023-03-15
  • 12.8.0 - 2023-03-14
  • 12.7.0 - 2023-02-25
  • 12.6.0 - 2023-02-15
  • 12.5.1 - 2023-02-02
  • 12.5.0 - 2023-01-31
  • 12.4.1 - 2023-01-27
  • 12.4.0 - 2023-01-24
  • 12.3.0 - 2023-01-03
  • 12.2.0 - 2022-12-20
  • 12.1.0 - 2022-12-12
  • 12.0.2 - 2022-12-08
  • 12.0.1 - 2022-12-07
  • 12.0.0 - 2022-12-06
  • 11.2.0 - 2022-11-22
  • 11.1.0 - 2022-11-15
  • 11.0.1 - 2022-11-10
  • 11.0.0 - 2022-11-08
  • 10.11.0 - 2022-10-25
  • 10.10.0 - 2022-10-11
  • 10.9.0 - 2022-09-27
  • 10.8.0 - 2022-09-13
  • 10.7.0 - 2022-08-30
  • 10.6.0 - 2022-08-16
  • 10.5.0 - 2022-08-15
  • 10.4.0 - 2022-08-02
  • 10.3.1 - 2022-07-18
  • 10.3.0 - 2022-06-28
  • 10.2.0 - 2022-06-21
  • 10.1.0 - 2022-06-10
  • 10.0.3 - 2022-06-06
  • 10.0.2 - 2022-06-02
  • 10.0.1 - 2022-06-02
  • 10.0.0 - 2022-06-01
  • 9.7.0 - 2022-05-23
  • 9.6.1 - 2022-05-09
  • 9.6.0 - 2022-04-25
  • 9.5.4 - 2022-04-11
  • 9.5.3 - 2022-03-28
  • 9.5.2 - 2022-03-14
  • 9.5.1 - 2022-02-28
  • 9.5.0 - 2022-02-15
  • 9.4.1 - 2022-01-31
  • 9.4.0 - 2022-01-31
  • 9.3.1 - 2022-01-19
  • 9.3.0 - 2022-01-18
  • 9.2.1 - 2022-01-10
  • 9.2.0 - 2021-12-21
  • 9.1.1 - 2021-12-04
  • 9.1.0 - 2021-11-23
  • 9.0.0 - 2021-11-10
  • 8.7.0 - 2021-10-25
  • 8.6.0 - 2021-10-11
  • 8.5.0 - 2021-09-27
  • 8.4.1 - 2021-09-17
  • 8.4.0 - 2021-09-13
  • 8.3.1 - 2021-08-27
  • 8.3.0 - 2021-08-16
  • 8.2.0 - 2021-08-04
  • 8.1.0 - 2021-07-29
  • 8.0.0 - 2021-07-20
  • 7.7.0 - 2021-07-07
  • 7.6.0 - 2021-06-23
  • 7.5.0 - 2021-06-07
  • 7.4.0 - 2021-05-24
  • 7.3.0 - 2021-05-10
  • 7.2.0 - 2021-04-26
  • 7.1.0 - 2021-04-12
  • 7.0.1 - 2021-04-07
  • 7.0.0 - 2021-04-05
  • 6.9.1 - 2021-04-06
  • 6.9.0 - 2021-04-05
  • 6.8.0 - 2021-03-17
  • 6.7.1 - 2021-03-15
  • 6.7.0 - 2021-03-15
  • 6.6.0 - 2021-02-18
  • 6.5.0 - 2021-02-16
  • 6.4.0 - 2021-02-01
  • 6.3.0 - 2021-01-20
  • 6.2.1 - 2021-01-04
  • 6.2.0 - 2020-12-21
  • 6.1.0 - 2020-12-07
  • 6.0.1 - 2020-11-30

    [skip ci]

  • 6.0.0 - 2020-11-24
  • 5.6.0 - 2020-11-09
  • 5.5.0 - 2020-10-27
  • 5.4.0 - 2020-10-14
  • 5.3.0 - 2020-09-29
  • 5.2.0 - 2020-09-15
  • 5.1.0 - 2020-09-01
  • 5.0.0 - 2020-08-19
  • 4.12.1 - 2020-08-05
  • 4.12.0 - 2020-08-03
from cypress GitHub release notes
Package name: del from del GitHub release notes
Package name: eslint
  • 9.0.0 - 2024-04-05

    Breaking Changes

    • b7cf3bd fix!: correct camelcase rule schema for allow option (#18232) (eMerzh)
    • 09bd7fe feat!: move AST traversal into SourceCode (#18167) (Nicholas C. Zakas)
    • 79a95eb feat!: disallow multiple configuration comments for same rule (#18157) (Milos Djermanovic)
    • 9163646 feat!: Rule Tester checks for missing placeholder data in the message (#18073) (fnx)
    • 3c4d51d feat!: default for enforceForClassMembers in no-useless-computed-key (#18054) (Francesco Trotta)
    • 47e60f8 feat!: Stricter rule test validations (#17654) (fnx)
    • 1a94589 feat!: no-unused-vars default caughtErrors to 'all' (#18043) (Josh Goldberg ✨)
    • 57089cb feat!: no-restricted-imports allow multiple config entries for same path (#18021) (Milos Djermanovic)
    • 2e1d549 feat!: detect duplicate test cases (#17955) (Bryan Mishkin)
    • 701f1af feat!: no-inner-declaration new default behaviour and option (#17885) (Tanuj Kanti)
    • bde5105 fix!: handle --output-file for empty output when saving to disk (#17957) (Nitin Kumar)
    • 07107a5 fix!: upgrade [email protected] (#17942) (Milos Djermanovic)
    • 3ee0f6c fix!: no-unused-vars varsIgnorePattern behavior with catch arguments (#17932) (Tanuj Kanti)
    • 51f8bc8 fix!: configuration comments with just severity should retain options (#17945) (Milos Djermanovic)
    • d191bdd feat!: Remove CodePath#currentSegments (#17936) (Milos Djermanovic)
    • 946ae00 feat!: FlatRuleTester -> RuleTester (#17922) (Nicholas C. Zakas)
    • baff28c feat!: remove no-inner-declarations from eslint:recommended (

@Omrisnyk
Copy link
Owner Author

Omrisnyk commented Jun 12, 2025

Snyk checks have failed. 3 issues have been found so far.

Icon Severity Issues
Critical 0
High 0
Medium 3
Low 0

security/snyk check is complete. 3 issues have been found. (View Details)

license/snyk check is complete. No issues have been found. (View Details)

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants