[Snyk] Security upgrade @pyroscope/nodejs from 0.2.6 to 0.2.9 #3205
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6032459
|
Test report for this run is available at: https://test-integrations-dev.s3.amazonaws.com/integrations-test-reports/rudder-transformer/3205/test-report.html |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## develop #3205 +/- ##
===========================================
+ Coverage 87.70% 87.71% +0.01%
===========================================
Files 550 550
Lines 29585 29616 +31
Branches 7056 7061 +5
===========================================
+ Hits 25947 25978 +31
- Misses 3302 3330 +28
+ Partials 336 308 -28 ☔ View full report in Codecov by Sentry. |
|
|
This PR is considered to be stale. It has been open for 20 days with no further activity thus it is going to be closed in 7 days. To avoid such a case please consider removing the stale label manually or add a comment to the PR. |
|
This PR is considered to be stale. It has been open for 20 days with no further activity thus it is going to be closed in 7 days. To avoid such a case please consider removing the stale label manually or add a comment to the PR. |
devops-github-rudderstack
deleted the
snyk-fix-ce9b7fea458bacbd24c3c74afa8c3aec
branch
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1
SNYK-JS-AXIOS-6032459
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @pyroscope/nodejs
The new version differs by 19 commits.See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Cross-site Request Forgery (CSRF)