[Snyk] Security upgrade vsce from 1.37.6 to 1.61.0
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this Merge Request
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
883/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 9.8 |
Arbitrary Code Execution SNYK-JS-UNDERSCORE-1080984 |
No | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: vsce
The new version differs by 146 commits.- 1ee7a2b 1.61.0
- fe3de2e cleanup
- 2cfb898 use basic handler
- 3502fba update deps to azure-devops-node-api
- 165f96d remove log
- af9ba1b 1.60.0
- 34381ff add noVerify
- 0c51764 fix launcher
- f4a3d0d fix tests
- b708803 fix travis
- 2c2d18d fix types
- 681efad cleanup, remove gulp
- a616aab 1.59.0
- 8477ee4 add flat.badgen.net
- 286a758 update badges
- 08f8f56 1.58.0
- 0bcfce9 Merge pull request #336 from Microsoft/joh/suggestbundle
- 7d6523d suggest bundling
- 61afd8f Recommend mocha test explorer
- 7fb8a16 Add test files to mocha explorer setting
- ccf030a 1.57.1
- 883921b Merge pull request #309 from barretlee/master
- bd00be7 1.57.0
- 6c04670 Revert theme detection
Check the changes in this Merge Request to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report