codeflash-ai/codeflash-internal
1
0
Fork 0
Code Issues Pull requests 39 Projects Releases Packages Wiki Activity Actions 2.0k

[Snyk] Security upgrade next from 14.2.33 to 14.2.35 #11

Open
codeflash-ai wants to merge 1 commit from snyk-fix-659041e0a5f12e2917a66bba975623bd into main
pull from: snyk-fix-659041e0a5f12e2917a66bba975623bd
merge into: codeflash-ai:main
Conversation 0 Commits 1 Files changed 1 +1 -1
codeflash-ai commented 2026-05-05 00:20:45 +00:00
Owner
Copy link

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • js/cf-webapp/package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Deserialization of Untrusted Data
SNYK-JS-NEXT-14400636		   852  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data

![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg) ### Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project. #### Snyk changed the following file(s): - `js/cf-webapp/package.json` #### Vulnerabilities that will be fixed with an upgrade: | | Issue | Score | :-------------------------:|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png 'high severity') | Deserialization of Untrusted Data <br/>[SNYK-JS-NEXT-14400636](https://snyk.io/vuln/SNYK-JS-NEXT-14400636) | &nbsp;&nbsp;**852**&nbsp;&nbsp; --- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - Max score is 1000. Note that the real score may have changed since the PR was raised. > - This PR was automatically created by Snyk using the credentials of a real user. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs._ For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiI0MDIyNzI0My1mOTY0LTQ3NmUtOGQ5Mi1mZDU5ZmVjODY4ZTAiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjQwMjI3MjQzLWY5NjQtNDc2ZS04ZDkyLWZkNTlmZWM4NjhlMCJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/sarthak-aNe3RTvxtiDtBRn3AkWpLk/project/0b2de2f0-9ee9-4749-939b-2fc69740db7f?utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr) 📜 [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=github-cloud-app&utm_content=fix-pr-template) 🛠 [Adjust project settings](https://app.snyk.io/org/sarthak-aNe3RTvxtiDtBRn3AkWpLk/project/0b2de2f0-9ee9-4749-939b-2fc69740db7f?utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr/settings) 📚 [Read about Snyk's upgrade logic](https://docs.snyk.io/scan-with-snyk/snyk-open-source/manage-vulnerabilities/upgrade-package-versions-to-fix-vulnerabilities?utm_source=github-cloud-app&utm_content=fix-pr-template) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Deserialization of Untrusted Data](https://learn.snyk.io/lesson/insecure-deserialization/?loc&#x3D;fix-pr) [//]: # 'snyk:metadata:{"breakingChangeRiskLevel":null,"FF_showPullRequestBreakingChanges":false,"FF_showPullRequestBreakingChangesWebSearch":false,"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"next","from":"14.2.33","to":"14.2.35"}],"env":"prod","issuesToFix":["SNYK-JS-NEXT-14400636"],"prId":"40227243-f964-476e-8d92-fd59fec868e0","prPublicId":"40227243-f964-476e-8d92-fd59fec868e0","packageManager":"npm","priorityScoreList":[852],"projectPublicId":"0b2de2f0-9ee9-4749-939b-2fc69740db7f","projectUrl":"https://app.snyk.io/org/sarthak-aNe3RTvxtiDtBRn3AkWpLk/project/0b2de2f0-9ee9-4749-939b-2fc69740db7f?utm_source=github-cloud-app&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["updated-fix-title","priorityScore"],"type":"auto","upgrade":["SNYK-JS-NEXT-14400636"],"vulns":["SNYK-JS-NEXT-14400636"],"patch":[],"isBreakingChange":false,"remediationStrategy":"vuln"}'
codeflash-ai added 1 commit 2026-05-05 00:20:46 +00:00
fix: js/cf-webapp/package.json to reduce vulnerabilities
Some checks failed
end-to-end-test / Wait for unit tests (pull_request) Blocked by required conditions
Details
end-to-end-test / bubble-sort-optimization-pytest-no-git (pull_request) Blocked by required conditions
Details
end-to-end-test / bubble-sort-pytest-no-git-status (pull_request) Blocked by required conditions
Details
end-to-end-test / bubble-sort-optimization-unittest (pull_request) Blocked by required conditions
Details
end-to-end-test / bubble-sort-unittest-status (pull_request) Blocked by required conditions
Details
Coverage E2E / No relevant changes detected (pull_request) Blocked by required conditions
Details
Coverage E2E / Wait for unit tests (pull_request) Blocked by required conditions
Details
Coverage E2E / end-to-end-test-coverage (pull_request) Blocked by required conditions
Details
end-to-end-test / futurehouse-structure (pull_request) Blocked by required conditions
Details
end-to-end-test / futurehouse-status (pull_request) Blocked by required conditions
Details
end-to-end-test / init-optimization (pull_request) Blocked by required conditions
Details
end-to-end-test / tracer-replay (pull_request) Blocked by required conditions
Details
end-to-end-test / tracer-replay-status (pull_request) Blocked by required conditions
Details
end-to-end-test / topological-sort-optimization (pull_request) Blocked by required conditions
Details
end-to-end-test / topological-sort-status (pull_request) Blocked by required conditions
Details
Mypy Type Checking for Aiservice / skip-type-check (pull_request) Blocked by required conditions
Details
Mypy Type Checking for Aiservice / type-check-aiservice (pull_request) Blocked by required conditions
Details
Mypy Type Checking for Aiservice / mypy-aiservice-status (pull_request) Blocked by required conditions
Details
Next.js Build Check / skip-build (pull_request) Blocked by required conditions
Details
Next.js Build Check / build (pull_request) Blocked by required conditions
Details
Build VSCode Extension / build (pull_request) Blocked by required conditions
Details
CF-API CI / check-changes (pull_request) Failing after 1s
Details
Codeflash AiService / check-changes (pull_request) Failing after 2s
Details
django-unit-tests / check-changes (pull_request) Failing after 2s
Details
Coverage E2E / check-changes (pull_request) Failing after 2s
Details
end-to-end-test / check-changes (pull_request) Failing after 2s
Details
Mypy Type Checking for Aiservice / check-changes (pull_request) Failing after 1s
Details
Next.js Build Check / check-changes (pull_request) Failing after 2s
Details
/ Run pr agent on every pull request, respond to user comments (pull_request) Failing after 1s
Details
Build VSCode Extension / check-min-version (pull_request) Failing after 4s
Details
1becc08c5f 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NEXT-14400636
Some checks failed
CF-API CI / skip-validate (pull_request) Blocked by required conditions
Details
CF-API CI / validate (pull_request) Blocked by required conditions
Details
Codeflash AiService / No aiservice changes detected (pull_request) Blocked by required conditions
Details
Codeflash AiService / Optimize new code in this PR (pull_request) Blocked by required conditions
Details
django-unit-tests / No aiservice changes detected (pull_request) Blocked by required conditions
Details
django-unit-tests / unit-tests (pull_request) Blocked by required conditions
Details
django-unit-tests / django-unit-tests-status (pull_request) Blocked by required conditions
Details
end-to-end-test / No relevant changes detected (pull_request) Blocked by required conditions
Details
end-to-end-test / Wait for unit tests (pull_request) Blocked by required conditions
Details
end-to-end-test / bubble-sort-optimization-pytest-no-git (pull_request) Blocked by required conditions
Details
end-to-end-test / bubble-sort-pytest-no-git-status (pull_request) Blocked by required conditions
Details
end-to-end-test / bubble-sort-optimization-unittest (pull_request) Blocked by required conditions
Details
end-to-end-test / bubble-sort-unittest-status (pull_request) Blocked by required conditions
Details
Coverage E2E / No relevant changes detected (pull_request) Blocked by required conditions
Details
Coverage E2E / Wait for unit tests (pull_request) Blocked by required conditions
Details
Coverage E2E / end-to-end-test-coverage (pull_request) Blocked by required conditions
Details
end-to-end-test / futurehouse-structure (pull_request) Blocked by required conditions
Details
end-to-end-test / futurehouse-status (pull_request) Blocked by required conditions
Details
end-to-end-test / init-optimization (pull_request) Blocked by required conditions
Details
end-to-end-test / tracer-replay (pull_request) Blocked by required conditions
Details
end-to-end-test / tracer-replay-status (pull_request) Blocked by required conditions
Details
end-to-end-test / topological-sort-optimization (pull_request) Blocked by required conditions
Details
end-to-end-test / topological-sort-status (pull_request) Blocked by required conditions
Details
Mypy Type Checking for Aiservice / skip-type-check (pull_request) Blocked by required conditions
Details
Mypy Type Checking for Aiservice / type-check-aiservice (pull_request) Blocked by required conditions
Details
Mypy Type Checking for Aiservice / mypy-aiservice-status (pull_request) Blocked by required conditions
Details
Next.js Build Check / skip-build (pull_request) Blocked by required conditions
Details
Next.js Build Check / build (pull_request) Blocked by required conditions
Details
Build VSCode Extension / build (pull_request) Blocked by required conditions
Details
CF-API CI / check-changes (pull_request) Failing after 1s
Details
Codeflash AiService / check-changes (pull_request) Failing after 2s
Details
django-unit-tests / check-changes (pull_request) Failing after 2s
Details
Coverage E2E / check-changes (pull_request) Failing after 2s
Details
end-to-end-test / check-changes (pull_request) Failing after 2s
Details
Mypy Type Checking for Aiservice / check-changes (pull_request) Failing after 1s
Details
Next.js Build Check / check-changes (pull_request) Failing after 2s
Details
/ Run pr agent on every pull request, respond to user comments (pull_request) Failing after 1s
Details
Build VSCode Extension / check-min-version (pull_request) Failing after 4s
Details
This pull request has changes conflicting with the target branch.
  • js/cf-webapp/package.json
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin snyk-fix-659041e0a5f12e2917a66bba975623bd:snyk-fix-659041e0a5f12e2917a66bba975623bd
git checkout snyk-fix-659041e0a5f12e2917a66bba975623bd

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git checkout main
git merge --no-ff snyk-fix-659041e0a5f12e2917a66bba975623bd
git checkout snyk-fix-659041e0a5f12e2917a66bba975623bd
git rebase main
git checkout main
git merge --ff-only snyk-fix-659041e0a5f12e2917a66bba975623bd
git checkout snyk-fix-659041e0a5f12e2917a66bba975623bd
git rebase main
git checkout main
git merge --no-ff snyk-fix-659041e0a5f12e2917a66bba975623bd
git checkout main
git merge --squash snyk-fix-659041e0a5f12e2917a66bba975623bd
git checkout main
git merge --ff-only snyk-fix-659041e0a5f12e2917a66bba975623bd
git checkout main
git merge snyk-fix-659041e0a5f12e2917a66bba975623bd
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug

Something isn't working

  
bug_fix

   
Bug fix

   
⚡️ codeflash

Optimization PR opened by CodeFlash AI

  
configuration changes

   
dependencies

Pull requests that update a dependency file

  
documentation

Improvements or additions to documentation

  
duplicate

This issue or pull request already exists

  
enhancement

New feature or request

  
formatting

   
github_actions

Pull requests that update GitHub Actions code

  
good first issue

Good for newcomers

  
help wanted

Extra attention is needed

  
invalid

This doesn't seem right

  
javascript

Pull requests that update Javascript code

  
logging

   
other

   
python

Pull requests that update Python code

  
🎯 Quality:

Optimization Quality according to codeflash

  
🎯 Quality: High

Optimization Quality according to codeflash

  
🎯 Quality: Medium

Optimization Quality according to Codeflash

  
question

Further information is requested

  
Review effort 1/5

   
Review effort [1-5]: 1

   
Review effort [1-5]: 2

   
Review effort [1-5]: 3

   
Review effort [1-5]: 4

   
Review effort [1-5]: 5

   
Review effort 2/5

   
Review effort 3/5

   
Review effort 4/5

   
Review effort 5/5

   
Tests

   
wontfix

This will not be worked on

No labels
bug
bug_fix
Bug fix
⚡️ codeflash
configuration changes
dependencies
documentation
duplicate
enhancement
formatting
github_actions
good first issue
help wanted
invalid
javascript
logging
other
python
🎯 Quality:
🎯 Quality: High
🎯 Quality: Medium
question
Review effort 1/5
Review effort [1-5]: 1
Review effort [1-5]: 2
Review effort [1-5]: 3
Review effort [1-5]: 4
Review effort [1-5]: 5
Review effort 2/5
Review effort 3/5
Review effort 4/5
Review effort 5/5
Tests
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: codeflash-ai/codeflash-internal#11
No description provided.
Delete branch "snyk-fix-659041e0a5f12e2917a66bba975623bd"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?