fix: security upgrade prismjs from 1.26.0 to 1.27.0 #2047

snyk-bot · 2022-02-21T00:42:00Z

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	556/1000 Why? Recently disclosed, Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) SNYK-JS-PRISMJS-2404333	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: prismjs

The new version differs by 22 commits.

703881e 1.27.0
7ac1373 Updated changelog for v1.27.0 (#3342)
e002e78 Command Line: Escape markup in command line output (#3341)
13b56a9 Bump follow-redirects from 1.14.7 to 1.14.8 (#3338)
f094c4a Bump yargs-parser from 5.0.0 to 5.0.1 (#3334)
9fd4c74 Bump ajv from 6.10.0 to 6.12.6 (#3333)
3fcca6b Bump pathval from 1.1.0 to 1.1.1 (#3331)
1784b17 Command Line: Add support for line continuation and improved colors (#3326)
f545843 ESLint: Allow `Map` and `Set` in ES5 code (#3328)
d6c5372 PureBasic: Added missing keyword and fixed constants ending with `$` (#3320)
82d0ca1 Command Line: Added span around command and output (#3312)
2cc4660 Core: Added better error message for missing grammars (#3311)
3f8cc5a Added UO Razor Script (#3309)
bcb2e2c AutoIt: Allow hyphen in directive (#3308)
deb3a97 INI: Swap out `header` for `section` (#3304)
e46501b editorconfig: Change alias of `section` from `keyword` to `selector` (#3305)
2eb89e1 Swap out `operator` for `punctuation` (#3306)
3a20bdc Bump node-fetch from 2.6.1 to 3.1.1 (#3307)
081d515 Bump copy-props from 2.0.4 to 2.0.5 (#3300)
b90e97c Bump follow-redirects from 1.13.1 to 1.14.7 (#3299)
8458c41 MongoDB: Added v5 support (#3297)
441a142 Scala: Added support for interpolated strings (#3293)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-PRISMJS-2404333

parse-github-assistant · 2022-02-21T00:42:08Z

I will reformat the title to use the proper commit message syntax.

parse-github-assistant · 2022-02-23T00:53:48Z

Thanks for opening this pull request!

❌ Please edit your post and use the provided template when creating a new pull request. This helps everyone to understand your post better and asks for essential information to quicker review the pull request.

# [4.0.0-alpha.17](4.0.0-alpha.16...4.0.0-alpha.17) (2022-02-23) ### Bug Fixes * security upgrade prismjs from 1.26.0 to 1.27.0 ([#2047](#2047)) ([3afb24e](3afb24e))

parseplatformorg · 2022-02-23T00:56:59Z

🎉 This change has been released in version 4.0.0-alpha.17

# [4.0.0-beta.4](4.0.0-beta.3...4.0.0-beta.4) (2022-03-04) ### Bug Fixes * adding internal class (e.g. `_User`) fails due to prefixed underscore ([#2036](#2036)) ([f80bd07](f80bd07)) * security upgrade prismjs from 1.26.0 to 1.27.0 ([#2047](#2047)) ([3afb24e](3afb24e))

parseplatformorg · 2022-03-04T16:11:01Z

🎉 This change has been released in version 4.0.0-beta.4

…2047)

* security upgrade prismjs from 1.26.0 to 1.27.0 ([parse-community#2047](parse-community#2047)) ([3afb24e](parse-community@3afb24e))

* adding internal class (e.g. `_User`) fails due to prefixed underscore ([parse-community#2036](parse-community#2036)) ([f80bd07](parse-community@f80bd07)) * security upgrade prismjs from 1.26.0 to 1.27.0 ([parse-community#2047](parse-community#2047)) ([3afb24e](parse-community@3afb24e))

* security upgrade prismjs from 1.26.0 to 1.27.0 ([parse-community#2047](parse-community#2047)) ([3afb24e](parse-community@3afb24e))

# [4.1.0-alpha.1](4.0.1...4.1.0-alpha.1) (2022-03-23) ### Bug Fixes * adding internal class (e.g. `_User`) fails due to prefixed underscore ([#2036](#2036)) ([e004e70](e004e70)) * security upgrade prismjs from 1.26.0 to 1.27.0 ([#2047](#2047)) ([ffbca12](ffbca12)) * upgrade @babel/runtime from 7.17.0 to 7.17.2 ([#2055](#2055)) ([3e8449b](3e8449b)) * upgrade express from 4.17.2 to 4.17.3 ([#2058](#2058)) ([d1357de](d1357de)) * upgrade otpauth from 7.0.10 to 7.0.11 ([#2061](#2061)) ([05c5ac8](05c5ac8)) ### Features * change string filter description ([#2059](#2059)) ([6470c8e](6470c8e))

# [4.1.0-beta.1](4.0.1...4.1.0-beta.1) (2022-03-23) ### Bug Fixes * adding internal class (e.g. `_User`) fails due to prefixed underscore ([#2036](#2036)) ([e004e70](e004e70)) * security upgrade prismjs from 1.26.0 to 1.27.0 ([#2047](#2047)) ([ffbca12](ffbca12)) * upgrade @babel/runtime from 7.17.0 to 7.17.2 ([#2055](#2055)) ([3e8449b](3e8449b)) * upgrade express from 4.17.2 to 4.17.3 ([#2058](#2058)) ([d1357de](d1357de)) * upgrade otpauth from 7.0.10 to 7.0.11 ([#2061](#2061)) ([05c5ac8](05c5ac8)) ### Features * change string filter description ([#2059](#2059)) ([6470c8e](6470c8e))

# [4.1.0](4.0.1...4.1.0) (2022-04-03) ### Bug Fixes * adding internal class (e.g. `_User`) fails due to prefixed underscore ([#2036](#2036)) ([e004e70](e004e70)) * security upgrade prismjs from 1.26.0 to 1.27.0 ([#2047](#2047)) ([ffbca12](ffbca12)) * upgrade @babel/runtime from 7.17.0 to 7.17.2 ([#2055](#2055)) ([3e8449b](3e8449b)) * upgrade express from 4.17.2 to 4.17.3 ([#2058](#2058)) ([d1357de](d1357de)) * upgrade otpauth from 7.0.10 to 7.0.11 ([#2061](#2061)) ([05c5ac8](05c5ac8)) ### Features * change string filter description ([#2059](#2059)) ([6470c8e](6470c8e))

# [4.0.0-alpha.17](parse-community/parse-dashboard@4.0.0-alpha.16...4.0.0-alpha.17) (2022-02-23) ### Bug Fixes * security upgrade prismjs from 1.26.0 to 1.27.0 ([parse-community#2047](parse-community#2047)) ([3afb24e](parse-community@3afb24e))

…2047)

# [4.0.0-alpha.17](parse-community/parse-dashboard@4.0.0-alpha.16...4.0.0-alpha.17) (2022-02-23) ### Bug Fixes * security upgrade prismjs from 1.26.0 to 1.27.0 ([parse-community#2047](parse-community#2047)) ([3afb24e](parse-community@3afb24e))

fix: package.json & package-lock.json to reduce vulnerabilities

8e264be

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-PRISMJS-2404333

parse-github-assistant bot changed the title ~~[Snyk] Security upgrade prismjs from 1.26.0 to 1.27.0~~ refactor: security upgrade prismjs from 1.26.0 to 1.27.0 Feb 21, 2022

mtrezza changed the title ~~refactor: security upgrade prismjs from 1.26.0 to 1.27.0~~ fix: security upgrade prismjs from 1.26.0 to 1.27.0 Feb 23, 2022

mtrezza merged commit 3afb24e into alpha Feb 23, 2022

mtrezza deleted the snyk-fix-fa608e664e7cefc50ac7d6d4a6f489e1 branch February 23, 2022 00:53

parseplatformorg added the state:released-alpha Released as alpha version label Feb 23, 2022

parseplatformorg added the state:released-beta Released as beta version label Mar 4, 2022

mtrezza pushed a commit to mtrezza/parse-dashboard that referenced this pull request Mar 23, 2022

fix: security upgrade prismjs from 1.26.0 to 1.27.0 (parse-community#…

ffbca12

…2047)

mtrezza pushed a commit to mtrezza/parse-dashboard that referenced this pull request Mar 23, 2022

chore(release): 4.0.0-alpha.17 [skip ci]

7e914f1

* security upgrade prismjs from 1.26.0 to 1.27.0 ([parse-community#2047](parse-community#2047)) ([3afb24e](parse-community@3afb24e))

mtrezza pushed a commit to mtrezza/parse-dashboard that referenced this pull request Mar 23, 2022

chore(release): 4.0.0-alpha.17 [skip ci]

d1b4cd6

* security upgrade prismjs from 1.26.0 to 1.27.0 ([parse-community#2047](parse-community#2047)) ([3afb24e](parse-community@3afb24e))

snyk-bot mentioned this pull request Jul 12, 2022

refactor: upgrade js-beautify from 1.14.2 to 1.14.4 #2216

Merged

dblythy pushed a commit to dblythy/parse-dashboard that referenced this pull request Jan 19, 2023

fix: security upgrade prismjs from 1.26.0 to 1.27.0 (parse-community#…

383103c

…2047)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix: security upgrade prismjs from 1.26.0 to 1.27.0 #2047

fix: security upgrade prismjs from 1.26.0 to 1.27.0 #2047

Uh oh!

snyk-bot commented Feb 21, 2022

Uh oh!

parse-github-assistant bot commented Feb 21, 2022

Uh oh!

parse-github-assistant bot commented Feb 23, 2022

Uh oh!

parseplatformorg commented Feb 23, 2022

Uh oh!

parseplatformorg commented Mar 4, 2022

Uh oh!

Uh oh!

Uh oh!

fix: security upgrade prismjs from 1.26.0 to 1.27.0 #2047

fix: security upgrade prismjs from 1.26.0 to 1.27.0 #2047

Uh oh!

Conversation

snyk-bot commented Feb 21, 2022

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:

Uh oh!

parse-github-assistant bot commented Feb 21, 2022

Uh oh!

parse-github-assistant bot commented Feb 23, 2022

Thanks for opening this pull request!

Uh oh!

parseplatformorg commented Feb 23, 2022

Uh oh!

parseplatformorg commented Mar 4, 2022

Uh oh!

Uh oh!