[Snyk] Security upgrade heroku from 7.56.0 to 8.0.2#129

Open

ASWINRM wants to merge 1 commit intomainfrom

snyk-fix-198d4a3d219e47d45bf84b4685acf83e

Owner

ASWINRM commented Aug 2, 2025

Snyk has created this PR to fix 7 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

package.json
package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Misinterpretation of Input SNYK-JS-URIJS-2440699	646
	Cross-site Scripting (XSS) SNYK-JS-URIJS-2441239	591
	Open Redirect SNYK-JS-URIJS-1319803	586
	Open Redirect SNYK-JS-URIJS-2401466	586
	Improper Input Validation SNYK-JS-URIJS-2415026	586
	Open Redirect SNYK-JS-URIJS-2419067	586
	Prototype Pollution SNYK-JS-URIJS-1319806	579

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has automatically assigned this pull request, set who gets assigned.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
👩‍💻 Set who automatically gets assigned
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect
🦉 Prototype Pollution
🦉 Improper Input Validation
🦉 More lessons are available in Snyk Learn


          fix: package.json & package-lock.json to reduce vulnerabilities

a29827d

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-URIJS-2440699
- https://snyk.io/vuln/SNYK-JS-URIJS-2441239
- https://snyk.io/vuln/SNYK-JS-URIJS-1319803
- https://snyk.io/vuln/SNYK-JS-URIJS-2401466
- https://snyk.io/vuln/SNYK-JS-URIJS-2415026
- https://snyk.io/vuln/SNYK-JS-URIJS-2419067
- https://snyk.io/vuln/SNYK-JS-URIJS-1319806

ASWINRM self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet