[Snyk] Security upgrade sanitize-html from 2.17.2 to 2.17.3#1244
[Snyk] Security upgrade sanitize-html from 2.17.2 to 2.17.3#1244
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SANITIZEHTML-16086080
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
This PR upgrades the sanitize-html npm dependency to address a reported low-severity XSS vulnerability (SNYK-JS-SANITIZEHTML-16086080) in the docs UI project.
Changes:
- Bumps
sanitize-htmlfrom2.17.2to2.17.3inpackage.json. - Updates
sanitize-htmlresolution metadata inpackage-lock.json.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| package.json | Pins sanitize-html to 2.17.3 to remediate the Snyk-reported vulnerability. |
| package-lock.json | Updates the lockfile’s installed sanitize-html version to 2.17.3 (but currently introduces a spec mismatch vs package.json). |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-SANITIZEHTML-16086080
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Cross-site Scripting (XSS)