Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Security upgrade electron from 15.5.7 to 23.2.3 #10

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade electron from 15.5.7 to 23.2.3 #10

wants to merge 1 commit into from

Conversation

TheRedHatter
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • doc/js_tutorials/js_assets/webnn-electron/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 586/1000
Why? Recently disclosed, Has a fix available, CVSS 6		 Improper Access Control
SNYK-JS-ELECTRON-5885098		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Access Control

@snyk-bot
fix: doc/js_tutorials/js_assets/webnn-electron/package.json to reduce…
5e37587 
… vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELECTRON-5885098
prisma-cloud-devsecops[bot]
prisma-cloud-devsecops bot reviewed Sep 8, 2023
View reviewed changes
Copy link

@prisma-cloud-devsecops prisma-cloud-devsecops bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Prisma Cloud has found errors in this PR ⬇️

doc/js_tutorials/js_assets/webnn-electron/package.json
@@ -9,6 +9,6 @@
"start": "electron ."
},
"dependencies": {
"electron": "^15.1.2"
"electron": "^23.2.3"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

electron 23.2.3 / package.json

Total vulnerabilities: 1

Critical: 0 High: 0 Medium: 1 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-39956 MEDIUM MEDIUM 4 23.3.13 Open

@TheRedHatter
Copy link
Owner Author

Logo
Checkmarx One – Scan Summary & Details – 5e0d3847-acfe-4288-9f67-44bd857b2d75

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/filter.simd.hpp: 251 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1633 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/pooling_layer.cpp: 1072 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/eltwise_layer.cpp: 470 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/int8layers/eltwise_layer.cpp: 608 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jchuff.c: 640 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jchuff.c: 639 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jchuff.c: 638 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jchuff.c: 638 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2033 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 1705 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2132 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2049 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jccoefct.c: 445 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2083 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 949 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2144 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2137 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2054 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1924 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1648 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1643 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1628 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 186 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 185 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 129 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/color_yuv.simd.hpp: 1651 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/pooling_layer.cpp: 1118 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereosgbm.cpp: 1331 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereobm.cpp: 917 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/posit.cpp: 180 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libpng/png.c: 4039 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2709 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2275 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2121 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 1837 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 304 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 303 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 294 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 284 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/test/test_thresh.cpp: 461 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/test/test_color.cpp: 1633 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/resize.cpp: 1190 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 333 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 135 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/imgwarp.cpp: 2143 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/filter.simd.hpp: 260 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 1669 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 1095 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 945 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 940 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 939 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 812 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 811 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2136 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2127 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2123 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1929 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1920 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1909 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1909 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1905 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1885 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1881 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1876 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1872 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1668 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1628 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1604 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1595 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1591 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1591 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 184 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 162 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 161 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 160 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 159 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 158 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 156 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 155 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 153 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 152 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 139 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 138 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 137 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 136 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 128 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 127 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 126 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 125 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 115 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 114 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 113 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 112 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 111 Attack Vector
HIGH

More results are available on AST platform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@prisma-cloud-devsecops prisma-cloud-devsecops[bot] prisma-cloud-devsecops[bot] left review comments

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@TheRedHatter @snyk-bot