Fix vulnerability

[viphan007]

No description provided.

[socket-security]

New and updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
gatsby	5.12.10	network, filesystem, environment	+505	264 MB	pieh
gatsby-plugin-sharp	5.9.0...5.12.3	None	+506/-6	265 MB	pieh
gatsby-transformer-sharp	5.9.0...5.12.3	None	+507/-7	265 MB	pieh

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue	Package	Version	Note	Source
Bin script confusion	gatsby	5.12.10	Bin Script: gatsby	gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json package.json
Network access	gatsby	5.12.10	Module: globalThis["fetch"] Location: cache-dir/commonjs/fast-refresh-overlay/components/hooks.js +9 more instances...	gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json package.json
Bin script confusion	gatsby-cli	5.10.0	Bin Script: gatsby
Bin script confusion	gatsby-cli	5.12.4	Bin Script: gatsby	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	http2-wrapper	2.2.0	Module: tls Location: source/agent.js +8 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	ws	8.11.0	Module: tls Location: lib/sender.js +9 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	@parcel/runtime-js	2.8.3	Module: globalThis["fetch"] Location: lib/helpers/browser/html-loader.js +5 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
No README	@parcel/runtime-js	2.8.3	Location: Package overview	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	abortcontroller-polyfill	1.7.5	Module: globalThis["fetch"] Location: dist/cjs-ponyfill.js +18 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	event-source-polyfill	1.0.31	Module: globalThis["fetch"] Location: src/eventsource.js +2 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	@parcel/utils	2.8.3	Module: https Location: src/http-server.js +3 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
No README	@parcel/utils	2.8.3	Location: Package overview	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	body-parser	1.20.1	Module: http-errors Location: lib/read.js +2 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	express	4.18.2	Module: http Location: lib/application.js +2 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	express-http-proxy	1.6.3	Module: http Location: lib/requestOptions.js +5 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
Network access	xmlhttprequest-ssl	2.0.0	Module: http Location: lib/XMLHttpRequest.js +6 more instances...	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
New author	eslint-plugin-react-hooks	4.6.0	New Author: gnoff Previous Author: acdlite	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
New author	react-refresh	0.14.0	New Author: gnoff Previous Author: acdlite	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
New author	picomatch	2.2.2	New Author: mrmlnc Previous Author: jonschlinkert	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3, sass@1.62.0 via package.json
New author	@babel/plugin-syntax-import-meta	7.10.4	New Author: jlhwung Previous Author: nicolo-ribaudo	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0, gatsby-transformer-remark@6.9.0, gatsby-transformer-sharp@5.12.3 via package.json
New author	@babel/plugin-syntax-logical-assignment-operators	7.10.4	New Author: jlhwung Previous Author: nicolo-ribaudo	gatsby@5.12.10, gatsby-plugin-google-analytics@5.10.0, gatsby-plugin-google-tagmanager@5.11.0, gatsby-plugin-image@3.10.0, gatsby-plugin-manifest@5.10.0, gatsby-plugin-mdx@5.12.3, gatsby-plugin-offline@6.9.0, gatsby-plugin-react-helmet@6.9.0, gatsby-plugin-react-svg@3.3.0, gatsby-plugin-robots-txt@1.8.0, gatsby-plugin-root-import@2.0.9, gatsby-plugin-sass@6.9.0, gatsby-plugin-sharp@5.12.3, gatsby-plugin-styled-components@6.9.0, gatsby-source-contentful@8.12.0, gatsby-source-filesystem@5.9.0, gatsby-transformer-inline-svg@1.2.0,