[Snyk] Upgrade @nyaruka/temba-components from 0.1.7 to 0.130.1 by linuxclick · Pull Request #2 · linuxclick/rapidpro

linuxclick · 2025-10-04T17:06:00Z

Snyk has created this PR to upgrade @nyaruka/temba-components from 0.1.7 to 0.130.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 382 versions ahead of your current version.
The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	616	Proof of Concept
Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	616	Proof of Concept
Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	616	Proof of Concept
Server-Side Request Forgery (SSRF) SNYK-JS-AXIOS-1038255	616	Proof of Concept
Allocation of Resources Without Limits or Throttling SNYK-JS-AXIOS-12613773	616	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	616	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-9292519	616	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-9403194	616	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	616	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	616	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	616	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	616	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-584281	616	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	616	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	616	No Known Exploit

Release notes

Package name: @nyaruka/temba-components

from @nyaruka/temba-components GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @nyaruka/temba-components from 0.1.7 to 0.130.1. See this package in npm: @nyaruka/temba-components See this project in Snyk: https://app.snyk.io/org/alazad23979/project/63780ac6-88a0-4121-866e-25fa762f483e?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @nyaruka/temba-components from 0.1.7 to 0.130.1#2

[Snyk] Upgrade @nyaruka/temba-components from 0.1.7 to 0.130.1#2
linuxclick wants to merge 1 commit into
masterfrom
snyk-upgrade-ecf95be1fb2239c6a06ae4a164c20270

linuxclick commented Oct 4, 2025

Labels

2 participants

Conversation

linuxclick commented Oct 4, 2025

Snyk has created this PR to upgrade @nyaruka/temba-components from 0.1.7 to 0.130.1.

Issues fixed by the recommended upgrade:

Labels

2 participants