[Snyk] Upgrade react-scripts from 4.0.2 to 5.0.1 by isc-hemc · Pull Request #202 · isc-hemc/pylsa.tech

isc-hemc · 2025-11-30T10:39:54Z

Snyk has created this PR to upgrade react-scripts from 4.0.2 to 5.0.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 8 versions ahead of your current version.
The recommended version was released 4 years ago.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Prototype Poisoning SNYK-JS-QS-3153490	387	Proof of Concept
Prototype Poisoning SNYK-JS-QS-3153490	387	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-IP-12704893	387	Proof of Concept
Code Injection SNYK-JS-LODASHTEMPLATE-1088054	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIHTML-1296849	387	Proof of Concept
Remote Memory Exposure SNYK-JS-DNSPACKET-1293563	387	No Known Exploit
Remote Code Execution (RCE) SNYK-JS-EJS-2803307	387	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	387	Proof of Concept
Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	387	No Known Exploit
Improper Verification of Cryptographic Signature SNYK-JS-BROWSERIFYSIGN-6037026	387	No Known Exploit
Server-side Request Forgery (SSRF) SNYK-JS-IP-12761655	387	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	387	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	387	No Known Exploit
Cryptographic Issues SNYK-JS-ELLIPTIC-571484	387	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8172694	387	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ES5EXT-6095076	387	Proof of Concept
Denial of Service (DoS) SNYK-JS-HTTPPROXYMIDDLEWARE-8229906	387	Proof of Concept
Prototype Pollution SNYK-JS-IMMER-1019369	387	Proof of Concept
Arbitrary Code Injection SNYK-JS-SERIALIZEJAVASCRIPT-570062	387	Proof of Concept
Command Injection SNYK-JS-REACTDEVUTILS-1083268	387	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	387	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-ROLLUP-8073097	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	387	Proof of Concept
Arbitrary Code Injection SNYK-JS-EJS-1049328	387	Proof of Concept
Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	387	Proof of Concept
Function Call With Incorrect Argument Type SNYK-JS-CIPHERBASE-12084814	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	387	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	387	No Known Exploit
Server-Side Request Forgery (SSRF) SNYK-JS-IP-7148531	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1085627	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1243891	387	Proof of Concept
Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	387	No Known Exploit
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	387	No Known Exploit
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577916	387	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577917	387	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577918	387	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8187303	387	Proof of Concept
Information Exposure SNYK-JS-ELLIPTIC-8720086	387	Proof of Concept
Information Exposure SNYK-JS-EVENTSOURCE-2823375	387	Proof of Concept
Open Redirect SNYK-JS-EXPRESS-6474509	387	No Known Exploit
Cross-site Scripting SNYK-JS-EXPRESS-7926867	387	No Known Exploit
Predictable Value Range from Previous Values SNYK-JS-FORMDATA-10841150	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	387	Proof of Concept
Denial of Service (DoS) SNYK-JS-HTTPPROXY-569139	387	Proof of Concept
Cross-site Scripting SNYK-JS-SEND-7926862	387	No Known Exploit
Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	387	No Known Exploit
Function Call With Incorrect Argument Type SNYK-JS-SHAJS-12089400	387	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	387	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	387	Proof of Concept
Arbitrary File Overwrite SNYK-JS-TAR-1536528	387	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	387	No Known Exploit
Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	387	No Known Exploit
Prototype Pollution SNYK-JS-NODEFORGE-598677	387	Proof of Concept
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	387	No Known Exploit
Improper Input Validation SNYK-JS-URLPARSE-2407770	387	Proof of Concept
Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	387	Proof of Concept
Denial of Service (DoS) SNYK-JS-WS-7266574	387	Proof of Concept
Denial of Service (DoS) SNYK-JS-WS-7266574	387	Proof of Concept
Prototype Pollution SNYK-JS-Y18N-1021887	387	Proof of Concept
Arbitrary File Write SNYK-JS-TAR-1579147	387	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	387	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	387	No Known Exploit
Information Exposure SNYK-JS-NANOID-2332193	387	Proof of Concept
Improper Input Validation SNYK-JS-NANOID-8492085	387	No Known Exploit
Open Redirect SNYK-JS-NODEFORGE-2330875	387	Proof of Concept
Prototype Pollution SNYK-JS-NODEFORGE-2331908	387	No Known Exploit
Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	387	No Known Exploit
Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	387	No Known Exploit
Command Injection SNYK-JS-NODENOTIFIER-1035794	387	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	387	Proof of Concept
Generation of Predictable Numbers or Identifiers SNYK-JS-PBKDF2-10495496	387	Proof of Concept
Generation of Predictable Numbers or Identifiers SNYK-JS-PBKDF2-10495498	387	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	387	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	387	No Known Exploit
Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	387	Proof of Concept
Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	387	Proof of Concept
Improper Input Validation SNYK-JS-URLPARSE-1078283	387	No Known Exploit
Open Redirect SNYK-JS-URLPARSE-1533425	387	Proof of Concept
Access Restriction Bypass SNYK-JS-URLPARSE-2401205	387	Proof of Concept
Authorization Bypass SNYK-JS-URLPARSE-2407759	387	Proof of Concept
Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	387	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-WEBPACK-7840298	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	387	Proof of Concept
Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	387	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	387	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	387	No Known Exploit

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-scripts from 4.0.2 to 5.0.1. See this package in yarn: react-scripts See this project in Snyk: https://app.snyk.io/org/davestring/project/748ee62d-c7be-4b3b-97ca-50af8762c056?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade react-scripts from 4.0.2 to 5.0.1#202

[Snyk] Upgrade react-scripts from 4.0.2 to 5.0.1#202
isc-hemc wants to merge 1 commit intomainfrom
snyk-upgrade-4dd2503adafbe0e56d444fef9f12d0f4

isc-hemc commented Nov 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

isc-hemc commented Nov 30, 2025

Snyk has created this PR to upgrade react-scripts from 4.0.2 to 5.0.1.

Issues fixed by the recommended upgrade:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants