This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-NODEFETCH-2964180 |
No | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @ampproject/toolbox-optimizer
The new version differs by 203 commits.- 881ffbd v2.7.4
- 403350c update changelog
- ca8fb70 Readd cross fetch (#1118)
- 933aee9 update githead
- b0efede v2.7.3
- 7736b8f update changelog
- f23b914 Improve viewport check (#1116)
- 53951ba Auto add layout=responsive if missing (#1115)
- 83d1d42 add viewport check to PX
- 76c08c0 v2.7.2
- f80d430 update changelog
- e5e8f4a disable renovate
- 5049b3d Split preconnect and dns-prefetch into two separate links (#1065)
- b3193d7 Remove status as we no longer use travis.
- 8c8dd14 Remove cross-fetch
- fa17cca fix missing dependencies and test outputs
- 71e492b Revert "Update dependency @ ampproject/toolbox-optimizer (#975)" (#1072)
- 7293bcf Update dependency @ ampproject/toolbox-optimizer (#975)
- 1814e29 Encode SVG sizer with base64 (#981)
- f7b7021 Merge pull request #980 from ampproject/linter-viewport
- f09df03 Add check for disabled tap delay
- a0a3383 Merge pull request #979 from processprocess/font-path
- 5c6f5a1 Add . before extension
- 174ddbc Merge pull request #976 from processprocess/image-path
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
Learn how to fix vulnerabilities with free interactive lessons: