Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Security upgrade electron from 15.5.7 to 20.3.12 #8

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade electron from 15.5.7 to 20.3.12 #8

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • doc/js_tutorials/js_assets/webnn-electron/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3252475		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use After Free

@snyk-bot
fix: doc/js_tutorials/js_assets/webnn-electron/package.json to reduce…
684fe6f 
… vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3252475
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@TheRedHatter
Copy link
Owner

Logo
Checkmarx One – Scan Summary & Details – 91c2980f-0c5f-4f6d-bf93-0a27bb84d0c3

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 258 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/imgwarp.cpp: 1980 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 949 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2144 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2137 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2054 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2037 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1924 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1648 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1643 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1628 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 186 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 185 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 129 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/color_yuv.simd.hpp: 1651 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/pooling_layer.cpp: 1118 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/pooling_layer.cpp: 1035 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/core/src/matrix_decomp.cpp: 126 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/undistort.simd.hpp: 264 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereosgbm.cpp: 1403 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereosgbm.cpp: 1331 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereosgbm.cpp: 1109 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereobm.cpp: 917 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/posit.cpp: 180 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libpng/pngrtran.c: 734 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libpng/png.c: 4039 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jchuff.c: 639 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jchuff.c: 639 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2709 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2275 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2121 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 1875 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 1837 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 303 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 284 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/test/test_thresh.cpp: 461 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/test/test_color.cpp: 1633 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/resize.cpp: 1190 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 135 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/imgwarp.cpp: 2143 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/filter.simd.hpp: 260 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 1669 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 950 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 945 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 940 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 939 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 812 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 811 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2136 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2127 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1929 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1920 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1914 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1909 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1905 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1885 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1876 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1872 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1668 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1639 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1628 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1604 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1600 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1595 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1591 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1591 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 187 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 184 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 183 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 162 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 161 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 160 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 159 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 158 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 156 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 155 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 153 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 152 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 139 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 138 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 137 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 136 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 128 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 127 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 126 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 125 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 115 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 114 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 113 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 112 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 111 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/segmentation.cpp: 220 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/features2d/src/kaze/AKAZEFeatures.cpp: 206 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/pooling_layer.cpp: 1059 Attack Vector
HIGH

More results are available on AST platform

@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@snyk-bot @TheRedHatter