[Snyk] Security upgrade react-pdf from 7.7.1 to 7.7.3

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Arbitrary Code Injection SNYK-JS-REACTPDF-6814518	No	No Known Exploit

Commit messages

Package name: react-pdf

The new version differs by 4 commits.

1a69776 v7.7.3
208f28d Force isEvalSupported to false
8ca4d07 v7.7.2
260295b Force isEvalSupported to true

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Injection

This is a Snyk issue. Snyk is a tool that automatically tracks our repositories' dependencies and reports associated security vulnerabilities. It also automatically create PRs to fix these vulnerabilities.

    C+: Please follow these steps to test the linked PR before running through the reviewer checklist:
    - [ ] The first step is to understand the PR: what dependency is it upgrading, for which vulnerability, how it impacts our product & end users.
    - [ ] If the issue is not worth fixing, please add your reasoning in the issue and have the internal engineer review it.
    - [ ] Check the change log (which should be included in the PR description) to see all changes. We want to identify any breaking changes. If it is a minor version bump, it's unlikely that there are any breaking changes.
    - [ ] Test our feature(s) that make use of this package. If it does not work, we should understand what broke it. It is also a good idea to check our main flows to make sure they are not broken that you can add in the checklist screenshots/videos.

@rayane-djouah

Triggered auto assignment to Contributor Plus for review of internal employee PR - @rayane-djouah (Internal)

@chiragsalian

PR is here: #41869
cc @chiragsalian

we can close this one

Navigation Menu

Repository navigation

[Snyk] Security upgrade react-pdf from 7.7.1 to 7.7.3 #41870

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[Snyk] Security upgrade react-pdf from 7.7.1 to 7.7.3 #41870

Description

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:

Activity

melvin-bot commented on May 8, 2024

melvin-bot commented on May 8, 2024

rayane-d commented on May 9, 2024

rayane-d commented on Jun 5, 2024

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions