Skip to content

Conversation

@X-oss-byte
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade echarts from 5.4.1 to 5.5.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 7 versions ahead of your current version.
  • The recommended version was released a month ago, on 2024-02-18.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Sandbox Bypass
SNYK-JS-WEBPACK-3358798
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Improper Verification of Cryptographic Signature
SNYK-JS-BROWSERIFYSIGN-6037026
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GETFUNCNAME-5923417
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ADOBECSSTOOLS-6096077
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
No Known Exploit
Improper Input Validation
SNYK-JS-POSTCSS-5926692
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
No Known Exploit
Cross-site Scripting (XSS)
SNYK-JS-SERIALIZEJAVASCRIPT-6147607
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SIDEWAYFORMULA-3317169
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
No Known Exploit
Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Server-side Request Forgery (SSRF)
SNYK-JS-CYPRESSREQUEST-5871337
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Open Redirect
SNYK-JS-EXPRESS-6474509
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
No Known Exploit
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HTTPCACHESEMANTICS-3248783
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ADOBECSSTOOLS-5871286
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept
Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: echarts from echarts GitHub release notes
Commit messages
Package name: echarts
  • 0f4967b Merge pull request #19594 from apache/release-dev
  • b046d78 chore: rebuild and relase 5.5.0-rc.2
  • b0b4639 chore: relase 5.5.0-rc.2
  • e3fa16c Merge pull request #19593 from apache/module_default_esm_fix2
  • 6cefe27 fix: (1) Mistake in package.json "exports"."require" (2) Add entry for dist/** for file extension not specified usage (3) add dist/echarts.esm.mjs for case that not able to recognize as esm after dist/package.json with `{"type": "commonjs"}` added.
  • 3fbfd2b Merge pull request #19577 from apache/release-dev
  • b7548af chore: add a key
  • 4d3bbae Merge pull request #19568 from apache/fix-jest
  • fde9fbd fix(test): rename `jest.config.js` to `jest.config.cjs` to fix jest can't run
  • 52735fa Merge pull request #19564 from apache/release-dev
  • 3c6d9bb chore: release 5.5.0
  • 2deb0fd Merge pull request #19549 from apache/release-dev
  • 0392fb3 fix(ssr): call registerSSRDataGetter only with ssr
  • 2a43d11 Merge pull request #19558 from apache/revert-18921-fix/tooltip-color
  • 1b1284f Revert "fix(tooltip): fix opacity not work in tooltip marker"
  • e14cc9a fix(ssr): hovering legend items should not trigger tooltip
  • 61af513 Merge pull request #19543 from apache/module_default_esm_fix
  • d403486 fix: (1) fix that some old version bundler (like rollup) do not recognize wildcard that not at the end of the patter string (e.g. "exports: {"./*.js": "xxx"}"). (2) Add readme to package.json.
  • f996884 Merge pull request #19532 from apache/master
  • 6b8fae8 Merge pull request #19513 from apache/module_default_esm
  • 9c3fc0e Merge pull request #19526 from apache/import-liftColor-from-zrender
  • 80172d6 Merge branch 'master' into module_default_esm
  • abe29f0 [fix] tweak ssr ts type, impl, exports and eslint
  • a2efa57 refactor(util): import `liftColor` function from zrender (feat(ssr): add emphasis style in ssr css apache/echarts#18334 ecomfe/zrender#999)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@bolt-new-by-stackblitz
Copy link

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@changeset-bot
Copy link

changeset-bot bot commented Mar 28, 2024

⚠️ No Changeset found

Latest commit: 27ac7fd

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants