Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade electron from 15.5.7 to 22.3.23 #9

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

TheRedHatter
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • doc/js_tutorials/js_assets/webnn-electron/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 716/1000
Why? Recently disclosed, Has a fix available, CVSS 8.6
Out-of-Bounds
SNYK-JS-ELECTRON-5880432
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

… vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELECTRON-5880432
@TheRedHatter
Copy link
Owner Author

Logo
Checkmarx One – Scan Summary & Details8e284d5c-7d8a-4662-abb0-8b8cc1983add

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2132 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2053 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2049 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2045 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereosgbm.cpp: 1280 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereobm.cpp: 948 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jchuff.c: 640 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jccoefct.c: 445 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2537 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2083 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 1995 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 258 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 949 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2144 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2137 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2054 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1648 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1643 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1628 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 129 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/color_yuv.simd.hpp: 1651 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/core/src/matrix_decomp.cpp: 126 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/undistort.simd.hpp: 264 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libpng/png.c: 4039 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 2709 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjasper/jpc_qmfb.c: 1837 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 304 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 303 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 284 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/test/test_thresh.cpp: 461 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/test/test_color.cpp: 1633 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/resize.cpp: 1190 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 267 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 135 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/filter.simd.hpp: 260 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 1669 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 1095 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 950 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 945 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 940 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 939 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 812 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 811 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2136 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2127 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1929 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1920 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1909 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1905 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1885 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1881 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1876 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1872 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1668 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1628 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1624 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1604 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1600 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1595 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1591 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1591 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 184 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 183 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 162 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 161 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 160 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 159 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 158 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 155 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 153 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 152 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 139 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 137 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 136 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 128 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 127 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 126 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 125 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 115 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 114 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 113 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 112 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 111 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/canny.cpp: 639 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/segmentation.cpp: 220 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/features2d/src/kaze/nldiffusion_functions.cpp: 480 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/features2d/src/kaze/nldiffusion_functions.cpp: 404 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/net_impl.cpp: 1468 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/fast_convolution/fast_convolution.cpp: 254 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/fast_convolution/depthwise_convolution.cpp: 64 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/int8layers/eltwise_layer.cpp: 561 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/int8layers/eltwise_layer.cpp: 554 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/core/src/matrix_decomp.cpp: 120 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/ptsetreg.cpp: 661 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/calibinit.cpp: 1009

More results are available on AST platform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants