[Snyk] Security upgrade bootstrap from 4.5.3 to 5.0.0 #24

Open

r3adm3 wants to merge 1 commit from snyk-fix-39144e160159d6c40ad45ed6bc668473 into main

r3adm3 commented

2024-08-07 08:10:28 +00:00

(Migrated from github.com)

Snyk has created this PR to fix 1 vulnerabilities in the nuget dependencies of this project.

Snyk changed the following file(s):

frontEnd/frontEnd.csproj

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Cross-site Scripting (XSS) SNYK-DOTNET-BOOTSTRAP-7640981	688

Important

Check the changes in this PR to ensure they won't cause issues with your project.

Max score is 1000. Note that the real score may have changed since the PR was raised.

This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123) ### Snyk has created this PR to fix 1 vulnerabilities in the nuget dependencies of this project. #### Snyk changed the following file(s): - `frontEnd/frontEnd.csproj` #### Vulnerabilities that will be fixed with an upgrade: | | Issue | Score | :-------------------------:|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png 'medium severity') | Cross-site Scripting (XSS) <br/>[SNYK-DOTNET-BOOTSTRAP-7640981](https://snyk.io/vuln/SNYK-DOTNET-BOOTSTRAP-7640981) |   **688**   --- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - Max score is 1000. Note that the real score may have changed since the PR was raised. > - This PR was automatically created by Snyk using the credentials of a real user. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs._ For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiIzZDRmYTZmNC0xZmI4LTQ3NTctOWEwZC1kMGJhMTdiNGZlMjEiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjNkNGZhNmY0LTFmYjgtNDc1Ny05YTBkLWQwYmExN2I0ZmUyMSJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/r3adm3/project/a157114a-17c3-4eb3-9569-156c4e0aa40e?utm_source=github&utm_medium=referral&page=fix-pr) 📜 [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates) 🛠 [Adjust project settings](https://app.snyk.io/org/r3adm3/project/a157114a-17c3-4eb3-9569-156c4e0aa40e?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read about Snyk's upgrade logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Cross-site Scripting (XSS)](https://learn.snyk.io/lesson/xss/?loc=fix-pr) [//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"bootstrap","from":"4.5.3","to":"5.0.0"}],"env":"prod","issuesToFix":[{"exploit_maturity":"Proof of Concept","id":"SNYK-DOTNET-BOOTSTRAP-7640981","priority_score":688,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.9","score":295},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Cross-site Scripting (XSS)"}],"prId":"3d4fa6f4-1fb8-4757-9a0d-d0ba17b4fe21","prPublicId":"3d4fa6f4-1fb8-4757-9a0d-d0ba17b4fe21","packageManager":"nuget","priorityScoreList":[688],"projectPublicId":"a157114a-17c3-4eb3-9569-156c4e0aa40e","projectUrl":"https://app.snyk.io/org/r3adm3/project/a157114a-17c3-4eb3-9569-156c4e0aa40e?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["updated-fix-title","priorityScore"],"type":"auto","upgrade":["SNYK-DOTNET-BOOTSTRAP-7640981"],"vulns":["SNYK-DOTNET-BOOTSTRAP-7640981"],"patch":[],"isBreakingChange":true,"remediationStrategy":"vuln"}'

This pull request has changes conflicting with the target branch.

frontEnd/frontEnd.csproj

View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Merge commit title

Merge pull request '[Snyk] Security upgrade bootstrap from 4.5.3 to 5.0.0' (#24) from snyk-fix-39144e160159d6c40ad45ed6bc668473 into main

Merge commit body

Reviewed-on: https://source.techfrontier.me.uk/r3adm3/multiservice/pulls/24

Merge pull request '[Snyk] Security upgrade bootstrap from 4.5.3 to 5.0.0' (#24) from snyk-fix-39144e160159d6c40ad45ed6bc668473 into main

Reviewed-on: https://source.techfrontier.me.uk/r3adm3/multiservice/pulls/24

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin snyk-fix-39144e160159d6c40ad45ed6bc668473:snyk-fix-39144e160159d6c40ad45ed6bc668473

git switch snyk-fix-39144e160159d6c40ad45ed6bc668473

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff snyk-fix-39144e160159d6c40ad45ed6bc668473

git switch snyk-fix-39144e160159d6c40ad45ed6bc668473

git rebase main

git switch main

git merge --ff-only snyk-fix-39144e160159d6c40ad45ed6bc668473

git switch snyk-fix-39144e160159d6c40ad45ed6bc668473

git rebase main

git switch main

git merge --no-ff snyk-fix-39144e160159d6c40ad45ed6bc668473

git switch main

git merge --squash snyk-fix-39144e160159d6c40ad45ed6bc668473